Skip to main content

Internet-connected hot tubs can be hacked and controlled remotely

Lars Plougmann/Flickr

Hot tubs are supposed to be a great way to relax, but that’s a little harder to do when you aren’t in control of them. Thousands of hot tubs running a system made by Balboa Water Group have exploits that can be hacked to allow malicious actors to remotely control them, according to a recent report from the BBC.

Recommended Videos

The issue, discovered by security researchers at the U.K.-based security firm Pen Test Partners, stems from lapses in a mobile app that enables hot tub owners to control their tubs from their phone. Attackers could theoretically gather information found on public resources to find homes with the vulnerable hot tubs and target them. The malicious actors could use third-party databases to find the GPS location data of a given tub and hijack it. There is no authentication that would prevent the attackers from getting into the system.

Once the attackers have picked their target, they can assume control of the tub remotely. That means they can make the temperature hotter or colder, take over the pumps and jets, and change the lights. The entire attack can be carried out over a smartphone or laptop.

According to the BBC, Balboa Water Group was caught off guard by the report and said it was “surprised” to learn of the vulnerability. The mobile app that gives users the ability to remotely control their hot tub has been available for about five years and users have never reported any issues or hacking attempts, according to the company.

Balboa Water Group is in the process of addressing the security flaw and plans to have it patched up by the end of February — which is a long time to leave a known flaw unpatched and available to exploit. The company is working with its customers to set up individual usernames and passwords so they can secure their apps. It previously opted not to have users set up personal accounts because it wanted to simplify the activation process. While that might have made things more convenient, the decision also exposed users to having their personal time in the hot tub interrupted by hackers.

AJ Dellinger
AJ Dellinger is a freelance reporter from Madison, Wisconsin with an affinity for all things tech. He has been published by…
The Yale Assure Lock 2 has only grown better with age
the yale assure lock 2 has only grown better with age plus

The Yale Assure Lock 2 has long held a spot on our roundup of the best smart locks. Offering a sleek design, robust companion app, and a multitude of customization options, it's a premium choice that's an easy recommendation for most shoppers. And while some smart locks begin to show their age over the years, the Yale Assure Lock 2 has only grown more enticing.

Part of this is due to its impressive durability — the one installed on my front door has seen more than a few Colorado storms yet remains in pristine condition — but the other reason is Yale's commitment to expanding the number of models in the Assure Lock 2 lineup. I recently had a chance to test out a second, newer version of the Assure Lock 2 that works with Apple Home Keys, and it cemented my belief that it's one of the best smart locks money can buy.

Read more
Hue gives users eight new free spring-focused themes
A TV with ambient backlighting from Philips Hue.

The latest Philip Hue app update, version 5.39, is now available from download from both the iOS and Android stores. This update introduces brand-new scenes, each of which has a distinctive springtime-theme. All of the themes are available now in the Hue scene gallery, and you should be able to find them after you update your app.

The eight scenes are Nature's colors, Precious, Narcissa, Baby's breath, Crocus, Blossom, Spring lake, and Spring blossom. Various shades of pink, yellow, and green dominate the scenes, but the most impressive of all is the Nature's colors option.

Read more
This Arlo security camera is 50% off today — down to $50
The Arlo Essential 2nd Gen security camera, installed outdoors.

Protect your entire home with the Arlo Essential 2nd Gen security camera -- you'll be able to afford multiples of this smart home device while Arlo's 50% discount is active. From the 2K model's original price of $100, you'll only have to pay $50, so covering every corner of your house will be easier on the wallet. You'll have to complete your purchases as soon as possible though, as we're not sure how much time is remaining for you to pocket the savings of $50 each for every unit of this security camera.

Why you should buy the Arlo Essential 2nd Gen security camera

Read more