Smart coffee makers raise privacy questions after unusual data requests

Recent reports about smart coffee makers have renewed questions about the data connected appliances collect and the security risks they may create.

An IT expert known as Nomad said on X that he disconnected his parents’ Keurig after it transmitted a terabyte of data in 10 days. The report described the transfer as apparently caused by a bug. Separately, TechRadar said a Lavazza coffee machine’s app requested access to contacts and call logs. The publication said it could not start a brew through the app, and Google Home commands could not select a specific drink such as espresso.

TechRadar said it had contacted both companies for comment. Consumer Reports has also cautioned that appliances relying on apps and collecting user data are becoming harder to avoid. The article cited Consumer Reports’ Steve Blair, who said he found a dryer sending the equivalent of 135,000 text messages per week to its manufacturer.

Connected appliances can offer useful features, but the article argues that weak software or website security at appliance companies could expose data or create openings for attackers. Consumer Reports recommends considering data security before buying connected products and setting up a separate router network for smart devices. The article’s author also questioned whether appliances such as refrigerators need Wi-Fi access.