Four US states sue TP-Link as router security fight escalates

Florida, Iowa, Montana and Nebraska accuse TP-Link of overstating router security and concealing Chinese links, as federal restrictions intensify scrutiny of foreign-made networking equipment.

Florida’s lawsuit against TP-Link has widened a growing legal and regulatory challenge for one of the best-known router makers in the US market. According to reports from multiple technology outlets, Florida is one of four states to file suit against the company on 6 October, accusing it of overstating the security of its home networking equipment and obscuring its connections to China. The cases add to a broader national debate over whether consumer routers can be trusted as ordinary household devices or should instead be treated as security-sensitive infrastructure.

In Florida’s complaint, the state says TP-Link’s routers have been associated with earlier cyberattacks that it attributes to Chinese government-backed hackers. The suit also alleges that the company misled buyers about the protections offered by its HomeShield security service and failed to be sufficiently transparent about its ties to China. Iowa filed a separate action on the same day, with its attorney general pointing to the company’s manufacturing footprint in China and the subsidies it has reportedly received from the Chinese government.

Montana and Nebraska have also brought cases, extending the pressure on TP-Link beyond questions of product marketing. Montana’s attorney general alleges that the company’s apps collect personal information, including location and device data, and that this information may be shared with connected entities. Nebraska’s filing goes further, saying TP-Link used a contractor with alleged links to the Chinese military to help build its manufacturing facility in Vietnam. Taken together, the cases reflect a broadening attack on both the company’s security claims and its corporate structure.

The litigation lands at the same time as tougher federal scrutiny of foreign-made networking gear. TechRepublic reported that the Federal Communications Commission has imposed restrictions on new foreign-produced routers, limiting TP-Link’s ability to sell some models in the US. Existing customers are not barred from using routers they already own, but the policy shift underlines the growing concern around supply chains, firmware security and the national security risk posed by connected devices that sit at the centre of home and small-office networks.

Disclaimer: This content is intended for informational purposes only. Readers are advised to exercise their own judgement, conduct due diligence, or consult a qualified expert before acting on any information provided.