Five US States Sue TP-Link Over Router Security and Disclosure Claims
Florida, Iowa, Montana, Nebraska and Texas allege TP-Link misled consumers about device security and ties to Chinese affiliates.
Key points
- Five states filed lawsuits accusing TP-Link of misleading advertising regarding router security and Chinese affiliations.
- The FCC adopted restrictions in March on new foreign-produced routers, though previously authorized models remain legal.
- TP-Link denies the allegations, stating its US devices are made in Vietnam and it operates as an independent US business.
Five US states have filed lawsuits against TP-Link, alleging the company misled consumers about router security features and its relationships with Chinese affiliates. Florida, Iowa, Montana, and Nebraska filed complaints on October 6, 2026, joining a suit filed by Texas in February.
The complaints accuse TP-Link Systems of failing to adequately disclose implications of Chinese intelligence laws and creating false expectations about protection against unauthorized access. According to the Iowa Attorney General’s Office, marketing for the HomeShield security service suggested robust protection despite known vulnerabilities and supply-chain concerns.
Legal and Regulatory Context
These state actions coincide with federal restrictions adopted by the Federal Communications Commission in March. The FCC rules affect authorization for new foreign-produced router models, but they do not prohibit the sale or use of routers that were previously authorized. The state lawsuits focus on consumer protection claims, including misleading advertising and inadequate security disclosures, rather than establishing that TP-Link deliberately provided foreign governments access to customer networks.
TP-Link rejected the accusations in a statement issued on October 6. Steve Kovsky, corporate affairs officer at TP-Link Systems, called the coordinated lawsuits built on false premises. The company maintains that it is an independent US business and that its US-market devices are manufactured in Vietnam. TP-Link asserts that allegations regarding unauthorized network access by foreign governments are baseless.
Impact on Users and IT Teams
The legal disputes raise questions about TP-Link’s security claims but do not prohibit Americans from using routers they already own. Existing owners can continue to use previously authorized devices without legal restriction. For IT teams and consumers, the immediate priorities involve identifying vulnerable devices, confirming ongoing firmware support, and understanding which equipment faces new purchasing restrictions under the FCC rules.
The cases do not establish that TP-Link deliberately provided foreign governments access to customer networks. The allegations challenge whether the company’s disclosures adequately explain the implications of Chinese cybersecurity laws on user data and network security.
What should you do?
IT professionals and consumers should review their current network hardware to determine if it falls under the new FCC restrictions for new purchases. Users should verify that their existing TP-Link devices receive regular firmware updates to address known vulnerabilities. Organizations should assess their procurement policies to ensure compliance with federal guidelines on foreign-produced networking equipment.
What to do and how to stay safe: TP-Link
- Inventory current network devices to identify any TP-Link routers that may be affected by new purchasing restrictions or known vulnerabilities.
- Check vendor support pages to confirm that existing devices are still receiving firmware updates and security patches.
- Review procurement guidelines to ensure new hardware purchases comply with FCC restrictions on foreign-produced router models.
- Monitor official statements from state attorneys general and the FCC for updates on legal proceedings and regulatory changes.
Step-by-step guide: Risk Based Vulnerability Management: Prioritize Fixes by Actual Threat
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Can I still use my TP-Link router?
Yes, the lawsuits and FCC restrictions do not prohibit Americans from using routers they already own or previously authorized models.
What are the states accusing TP-Link of?
Five states accuse TP-Link of misleading consumers about router security and failing to disclose relationships with Chinese affiliates.
Does this mean TP-Link routers are illegal?
No, previously authorized routers can generally still be sold and used; restrictions apply to authorization of new foreign-produced models.
