# TP-Link Sued by Five States: What It Means If You Own One

> Florida, Iowa, Montana and Nebraska sued TP-Link on Oct. 6, joining Texas. The claims are unproven, your router stays legal, and updates matter most.

- URL: https://wifiweekly.com/news/tp-link-state-lawsuits-what-owners-should-know/
- Type: News
- Topic: Security & Privacy
- Author: Tehseen Arbab
- Published: 2026-10-12
- Last updated: 2026-10-12
- Publisher: WiFi Weekly (https://wifiweekly.com/)

## Short answer

Florida, Iowa, Montana and Nebraska sued TP-Link on October 6, 2026, joining a Texas suit from February. The states allege it misled consumers about router security and its ties to China; TP-Link denies the claims, and no court has ruled. Owning or using a TP-Link router remains legal. Check that yours still gets firmware updates.

## Key takeaways

- Florida, Iowa, Montana and Nebraska sued TP-Link Systems on October 6, 2026. Texas filed the first state suit on February 17, 2026.
- The states allege TP-Link misled consumers about its routers' security, where they are made, and its ties to China. These are allegations; no court has ruled.
- TP-Link calls the lawsuits "built on false premises" and says it is an independent US company whose US devices are made in Vietnam.
- The FCC says consumers can keep using routers they own and can buy previously authorized models. TP-Link was not on the FCC's list of routers with Conditional Approval as of the list's October 9, 2026 update.

---


Four more US states sued router maker TP-Link on October 6, 2026, bringing the number of state lawsuits to five. Florida, Iowa, Montana and Nebraska accuse the company of misleading consumers about how secure its routers are and about its ties to China, following a similar Texas suit filed in February. TP-Link denies the claims, and no court has ruled on them.

If you own a TP-Link router, nothing about the lawsuits requires you to stop using it. What matters for your network today is the same as for any router: whether it still receives security updates. This is a news report based on the attorneys general's announcements, TP-Link's response and FCC documents. We have not read the full court filings.

## What happened?

| Date | Event | Source |
|---|---|---|
| February 17, 2026 | Texas sues TP-Link, describing it as the first of several suits that week against "China-Aligned Companies" | Texas Attorney General |
| October 6, 2026 | Florida, Iowa, Montana and Nebraska sue TP-Link | TP-Link's statement; Iowa Attorney General |
| October 6, 2026 | TP-Link calls the lawsuits "built on false premises" | TP-Link |
| October 7, 2026 | 21 state attorneys general, led by Nebraska, write to the FCC about TP-Link's request to sell new router models | Nebraska Attorney General |
| October 9, 2026 | FCC updates its Covered List page; TP-Link is not on its list of routers with Conditional Approval | FCC |

Iowa's suit is brought under the Iowa Consumer Fraud Act. The attorneys general announced the other suits as consumer-protection cases. We have not confirmed the court or statute for each one.

## What do the states allege?

The announcements we read make overlapping claims. In summary, the states allege that TP-Link:

- Marketed its routers as secure while, according to Texas, its products were used by Chinese state-sponsored hackers in cyberattacks against the United States.
- Misled consumers about where its products are made. Iowa says that despite TP-Link's statements that its routers are made in Vietnam, much of its research, development and manufacturing is in China and nearly all parts come from or through China.
- Hid its ties to China. Texas says those ties subject the company to Chinese laws that require support for intelligence services. Iowa's announcement goes further and says TP-Link firmware gives the Chinese government access to users' devices and data.

These are claims in lawsuits, not findings. Courts have not decided any of them, and TP-Link disputes them.

## What does TP-Link say?

In a statement dated October 6, 2026, TP-Link's corporate affairs officer Steve Kovsky called the lawsuits "built on false premises" and claims of foreign access "baseless." The company describes itself as "an independent, U.S. company that is not owned or controlled by any foreign government," says its devices sold in the US are made in Vietnam, and says it will not share customer network data with foreign governments. It says it looks forward to "refuting these baseless allegations in court."

## Is it still legal to own or buy a TP-Link router?

Yes to owning one. The lawsuits are actions against the company. They don't create rules for people who own its products.

Buying is shaped by a separate federal rule. On March 23, 2026, the FCC added foreign-produced routers from every manufacturer to its Covered List. Under that rule, new models need a Conditional Approval to be authorized for sale. The FCC's FAQ, updated May 12, 2026, says consumers using these routers "do not need to do anything," and that consumers "will continue to be able to purchase previously authorized routers."

The FCC's list of routers with Conditional Approval, updated October 9, 2026, includes Netgear, ASUS and eero, among others. TP-Link is not on it.

On October 7, a Nebraska-led group of 21 state attorneys general wrote to the FCC about TP-Link's pending request for that approval. Their announcement says their security concerns "must be addressed before a decision is made." The same announcement claims TP-Link controls at least 60 percent of the US retail market for Wi-Fi systems and small office and home routers. That figure is the attorneys general's claim; we have not verified it independently.

For more on how the rule affects which new routers reach US stores, see our [Wi-Fi 8 availability report](https://wifiweekly.com/news/wifi-8-routers-us-availability/).

## What should TP-Link owners do now?

The lawsuits don't change your router's security from one day to the next. These steps apply to any router, and they are the ones that make a practical difference:

1. **Update the firmware.** Check the TP-Link app or admin page for an update, and turn on automatic updates if your model offers them.
2. **Check whether your model is still supported.** A router that no longer receives security updates is a reason to replace it, whoever made it.
3. **If your internet provider supplied it, ask the provider.** TP-Link's advisory on its Aginet equipment, the line it makes for internet providers to supply and manage, covers five flaws, CVE-2025-30237 to CVE-2025-30241. TP-Link says fixes reach those devices "via ISP-managed update mechanisms" and that firmware for provider versions may not be available for direct download. If no update appears, contact your provider.
4. **Lock down the basics.** Change the admin password, turn off remote management and WPS, and keep smart home devices on a separate network. See our [router hardening checklist](https://wifiweekly.com/guides/router-hardening-checklist/), [WPS and UPnP guide](https://wifiweekly.com/guides/should-you-disable-wps-and-upnp/) and [guest network guide](https://wifiweekly.com/guides/guest-wifi-network-smart-home-devices/).

If you decide to replace your router anyway, our guide to [buying your own router vs. using your provider's](https://wifiweekly.com/guides/buy-your-own-router-vs-isp-equipment/) covers what to check first.

## What happens next?

The cases will proceed in state courts, and TP-Link has said it will contest them. Separately, the FCC has not announced a decision on TP-Link's request to sell new router models. We'll update this article when either changes.

## Fact-check notes

| Important claim | Source | Verification |
|---|---|---|
| Texas sued TP-Link on February 17, 2026, as the first of several suits that week | [Texas Attorney General, February 17, 2026](https://www.texasattorneygeneral.gov/news/releases/attorney-general-paxton-sues-tp-link-allowing-ccp-access-americans-devices-first-several-lawsuits) | Verified |
| Florida, Iowa, Montana and Nebraska sued TP-Link on October 6, 2026 | [TP-Link statement, October 6, 2026](https://www.tp-link.com/us/press/news/22570/) and [Iowa Attorney General, October 6, 2026](https://www.iowaattorneygeneral.gov/newsroom/attorney-general-brenna-bird-sues-tp-link-systems-for-violating-iowa-consumer-fraud-act-and-allowing) | Verified; we did not read the filings or confirm each court |
| Iowa's suit is under the Iowa Consumer Fraud Act; Iowa alleges China-linked manufacturing and firmware access | [Iowa Attorney General](https://www.iowaattorneygeneral.gov/newsroom/attorney-general-brenna-bird-sues-tp-link-systems-for-violating-iowa-consumer-fraud-act-and-allowing) | Qualified: allegations, not findings |
| Texas alleges TP-Link products were used by Chinese state-sponsored hackers and that China ties subject it to intelligence laws | [Texas Attorney General](https://www.texasattorneygeneral.gov/news/releases/attorney-general-paxton-sues-tp-link-allowing-ccp-access-americans-devices-first-several-lawsuits) | Qualified: allegations, not findings |
| TP-Link denies the claims, calls itself an independent US company and says US devices are made in Vietnam | [TP-Link statement](https://www.tp-link.com/us/press/news/22570/) | Verified as the company's statement |
| 21 attorneys general, led by Nebraska, said on October 7 that their concerns must be addressed before the FCC decides; they claim TP-Link has at least 60 percent of the relevant US retail market | [Nebraska Attorney General, October 7, 2026](https://ago.nebraska.gov/attorney-general-hilgers-leads-multi-state-coalition-raising-concerns-over-tp-links-china-ties) | Verified as their statement; the market-share figure is qualified as their claim |
| TP-Link is not on the FCC's router Conditional Approval list; Netgear, ASUS and eero are | [FCC Covered List, updated October 9, 2026, checked October 12, 2026](https://www.fcc.gov/supplychain/coveredlist) | Verified as of October 12, 2026; the list changes |
| Owners need not do anything and can buy previously authorized routers | [FCC router FAQ, updated May 12, 2026](https://www.fcc.gov/faqs-recent-updates-fcc-covered-list-regarding-routers-produced-foreign-countries) | Verified |
| Aginet flaws CVE-2025-30237 to -30241; fixes delivered through providers | [TP-Link advisory, updated October 9, 2026](https://www.tp-link.com/us/support/faq/5239/) | Verified |

## Bottom line

Five states now accuse TP-Link of misleading customers, and TP-Link says the cases have no merit. None of that changes whether you can use the router in your home. Make sure it's updated and still supported, ask your provider about any provider-supplied TP-Link equipment, and follow the FCC's decision on new models if you are shopping.


## Frequently asked questions

### Is it illegal to use a TP-Link router?

No. The lawsuits are consumer-protection cases against the company, not rules for owners. The FCC says consumers using covered routers in homes and small offices do not need to do anything, and can continue to buy previously authorized routers.

### Should I replace my TP-Link router?

Not because of the lawsuits alone. Replace any router, from any maker, when it stops receiving security updates. Check your model's support status and update its firmware.

### Can I still buy a TP-Link router in the US?

Previously authorized TP-Link models can still be sold, according to the FCC. New foreign-produced router models need a Conditional Approval to be authorized, and TP-Link was not on the FCC's approval list as of its October 9, 2026 update.

### What are the Aginet vulnerabilities?

Five flaws, CVE-2025-30237 to CVE-2025-30241, in TP-Link's Aginet equipment that internet providers supply and manage. TP-Link's advisory, updated October 9, 2026, says fixes are delivered through the provider's update system and tells owners to contact their provider if no update appears.

### What did the 21 attorneys general ask the FCC?

In a letter announced October 7, 2026, a Nebraska-led group of 21 state attorneys general told the FCC that their security concerns must be addressed before it decides on TP-Link's request for conditional approval to sell new router models.

## Sources

- Attorney General Brenna Bird Sues TP-Link Systems for Violating Iowa Consumer Fraud Act and Allowing China Access to Iowans' Routers, Iowa Attorney General: https://www.iowaattorneygeneral.gov/newsroom/attorney-general-brenna-bird-sues-tp-link-systems-for-violating-iowa-consumer-fraud-act-and-allowing
- TP-Link Systems Inc. Issues Statement in Response to Attorney General Lawsuits, TP-Link Systems Inc.: https://www.tp-link.com/us/press/news/22570/
- Attorney General Hilgers Leads Multi-State Coalition Raising Concerns Over TP-Link's China Ties, Nebraska Attorney General: https://ago.nebraska.gov/attorney-general-hilgers-leads-multi-state-coalition-raising-concerns-over-tp-links-china-ties
- Attorney General Paxton Sues TP Link for Allowing the CCP to Access Americans' Devices in First of Several Lawsuits Being Filed this Week Against China-Aligned Companies, Texas Attorney General: https://www.texasattorneygeneral.gov/news/releases/attorney-general-paxton-sues-tp-link-allowing-ccp-access-americans-devices-first-several-lawsuits
- List of Equipment and Services Covered By Section 2 of The Secure Networks Act, Federal Communications Commission: https://www.fcc.gov/supplychain/coveredlist
- FAQs on Recent Updates to FCC Covered List Regarding Routers Produced in Foreign Countries, Federal Communications Commission: https://www.fcc.gov/faqs-recent-updates-fcc-covered-list-regarding-routers-produced-foreign-countries
- Security Advisory: Multiple Vulnerabilities in ISP-Managed TP-Link Networking Products (CVE-2025-30237 to CVE-2025-30241), TP-Link: https://www.tp-link.com/us/support/faq/5239/