What we found
PIXMA (WiFi series): BSeven critical flaws in Canon PIXMA printers — each rated 9.8/10 severity — allowed any stranger on the internet to take full remote control without a password.
Seven critical buffer overflow vulnerabilities discovered (CVE-2023-6229 through CVE-2023-6234, CVE-2024-0244), all rated 9.8/10 CVSS. Unauthenticated remote attacker could execute arbitrary code. Affects PIXMA MG, G series.
OfficeJet Pro (HP+ series): BHP bricked printers owned by a fire station emergency housing charity by silently pushing a firmware update blocking third-party ink — then settled the class...
Dynamic Security blocks non-HP ink. Multiple class actions — 25K US settlement (2025), EUR 10M Italy (2020), A0/consumer Australia (2018). HP bricked printers owned by fire station charity via silent firmware update.
ENVY 6055e All-in-One Printer: BA printer is fundamentally a local device — it turns digital files into paper.
POLICY: HP+ FAQ confirms HP account required, printer must maintain permanent internet connection, only Original HP ink may be used for the lifetime of the printer, and activation is irreversible. FIRMWARE: HP Dynamic Security firmware blocks third-party cartridges via authentication chips. Printer connects to print.hp.com, instantink.hpconnected.com, smart.hp.com, eds.hp.com, ows.hpconnected.com, nsa.hpconnected.com, and devicemgmt.hp.com — requiring constant cloud connectivity for a device whose core function (printing) needs no internet.
Epson EcoTank ET-2850: B+Every page your printer produces has invisible yellow dots encoding the printer's serial number and the date and time.
Connected printers including Epson EcoTank collect and transmit usage data: print frequency, page counts, ink consumption patterns, and in some cases document metadata. Researchers have demonstrated that printer tracking dots — Machine Identification Codes (MIC) — embed unique serial numbers and timestamps in every printed page. The EFF documented this practice across HP, Epson, Brother, and Canon printers, enabling any printed document to be traced back to a specific printer.