Four more US states have sued TP-Link Systems over the security of its routers and its ties to China. Florida, Iowa, Montana and Nebraska filed their cases on 6 October, taking the total to five states after Texas filed a suit in February. TP-Link denies the claims and says it will fight them in court.
TP-Link is one of the most common router brands in Indian homes and small offices, so the case is worth watching. The lawsuits were filed in state courts under consumer-protection laws and target how the company marketed its security features and described its separation from its Chinese operations.
What the states allege
The Florida, Montana and Nebraska complaints make two main claims. First, that TP-Link advertised security it did not deliver. The complaints quote the HomeShield page, which says the built-in network protection service covers all security scenarios, against routers that were hacked and models that stopped getting fixes. Two versions of the Archer AX21, for example, reached end of life in May 2024.
Second, the complaints say TP-Link overstated its split from China. The company has said the 2024 restructuring left it with entirely different ownership, management and operations from TP-Link Technologies, the Chinese firm it was earlier affiliated with. TP-Link and TP-Link Technologies together employed about 11,000 people in China, according to the complaints.
The security angle and the ISP flaws
Florida, Montana and Nebraska do not claim the Chinese government has actually taken customer data through TP-Link devices. They describe it as a risk under Chinese law and say state-backed hackers have exploited flaws in TP-Link routers. Iowa went further. Attorney General Brenna Bird’s office said TP-Link firmware gives the Chinese government access to devices and data in the state, while the same release also describes that access as something that could happen.
The day after the lawsuits, 21 state attorneys general sent a letter to the FCC about TP-Link’s effort to get new router models approved in the US. Three complaints also cite five flaws found in TP-Link devices supplied by internet service providers. Researchers published technical details of those flaws on 8 October. Fixes exist and reach users through the ISP.
What Indian users should check
Whatever the outcome in US courts, the basics stay the same. Log in to your router admin page and confirm the firmware is up to date. If your router came from your ISP, ask the provider whether patches for the five reported flaws have been pushed to your model. Change the default admin password, disable remote management if you do not use it, and replace routers that no longer receive security updates.
HomeShield is available on TP-Link routers sold in India as well. Treat it as a helpful layer and not a guarantee, and keep independent habits such as strong Wi-Fi passwords and regular firmware checks in place.
FAQ
Why are US states suing TP-Link?
Florida, Iowa, Montana, Nebraska and Texas allege the company misled buyers about router security and its separation from China. The cases were filed under state consumer-protection laws.
Is my TP-Link router at risk in India?
The lawsuits are about marketing claims and company structure, not a single India-specific flaw. Still, users should install firmware updates and ask ISPs about patches for the five recently reported flaws.
What is TP-Link HomeShield?
It is TP-Link’s built-in network protection service on supported routers. The US lawsuits quote its claim of covering all security scenarios, arguing some routers were hacked or left without updates.
What are the five TP-Link flaws mentioned in the complaints?
They affect TP-Link devices supplied by internet service providers. Researchers published technical details on 8 October 2026, and fixes reach customers through the ISP.
Has TP-Link responded to the lawsuits?
Yes. TP-Link denies the claims and says it will fight them in court. The company is based in Irvine, California, and says a 2024 restructuring separated it from TP-Link Technologies in China.
