Gardyn Security Incident

Terms of Use

The basis on which this site is provided to you, and what you can expect from it.

What this site is

This site is independent security research and public-interest journalism. It documents CISA advisory ICSA-26-055-03 and related findings affecting the Gardyn IoT platform, with primary-source citations on every page.

This site is not affiliated with, endorsed by, or sponsored by Gardyn Inc. The word “Gardyn” is used solely as nominative reference under fair use for identification and commentary. The site does not claim trademark rights in any Gardyn-related mark.

Not legal advice

Nothing on this site constitutes legal advice. The state-by-state pages under For Customers describe general legal context for affected residents and link to authoritative resources, but they do not substitute for advice from an attorney licensed in your jurisdiction. If you need legal advice, consult an attorney.

Not financial, security, or professional advice

Nothing on this site constitutes financial advice, professional security advice for a specific environment, or compliance advice for any organization. The technical content is intended for general public information about a documented federal advisory. For environment-specific guidance, engage a qualified professional.

No warranty

The site is provided “as is.” Every effort is made to ensure that all claims are sourced and accurate at the time of publication. However, the maintainer makes no warranty, express or implied, regarding the accuracy, completeness, fitness for purpose, or non-infringement of the content. If you discover an error, please email corrections@gardyn-security-incident.info; corrections are welcomed and processed promptly with a dated correction-log entry per the methodology.

Linking

You may link to any page on this site without prior permission. Quoting in accordance with applicable fair-use or fair-dealing standards is welcomed for journalistic, academic, or educational purposes; please attribute the source.

Use of the site by Gardyn or its representatives

Gardyn Inc., its employees, agents, attorneys, and representatives are explicitly welcomed to read, link to, and submit corrections to this site. Corrections will be processed on the same terms as those from any other reader. The maintainer's contact channel for corrections is corrections@gardyn-security-incident.info.

Copyright

The textual content of this site, except for explicitly attributed quotations from third-party sources, is the work of the maintainer and is licensed for personal, journalistic, academic, and educational use under the Creative Commons Attribution 4.0 International license (CC BY 4.0). Quotations from third parties (CISA, NVD, MITRE, Gardyn, press outlets) remain the property of their respective copyright holders and are reproduced under applicable fair-use and fair-dealing standards.

Privacy

See the Privacy Policy. Short version: this site collects no data about you.

Governing law and jurisdiction

The maintainer is located in the State of New Jersey, United States. To the extent that any disputes arise from use of this site, they are governed by the laws of the State of New Jersey and the federal laws of the United States. Use of this site does not create a contract between you and the maintainer; these terms are provided for transparency and clarity, not as a binding agreement.

Changes to these terms

If these terms change, the prior version will be retained in the site's git history rather than overwritten. The current version is dated below.

Contact

Last updated: April 26, 2026.