Iowa attorney general sues TP-Link, alleging deceptive claims about router security

Iowa Attorney General Brenna Bird has filed a lawsuit against TP-Link Systems, alleging the router maker deceived Iowa consumers about the security of its products and the company’s ties to China.

The lawsuit alleges TP-Link marketed its routers as secure while failing to disclose that much of its research, development and manufacturing remains in China. The state also alleges the company’s routers use firmware that could give the Chinese government access to users’ devices and data.

TP-Link controls about 60% of the U.S. market for network devices such as routers, according to Bird’s office. The company has advertised features including wireless security encryption, secure guest Wi-Fi access and password protections.

Bird said the lawsuit is intended to ensure Iowans have accurate information when choosing technology for their homes. Her office said it is the first of several actions planned this week involving businesses it says are aligned with the Chinese government.

The lawsuit cites warnings from federal officials about the risks posed by compromised routers, including network surveillance, data theft, botnet attacks and unauthorized access to government and business networks. Bird’s office also pointed to reports from the National Security Agency and Microsoft about security vulnerabilities in TP-Link routers that it said were exploited by Chinese state hackers.