TP-Link branded routers are provided to US customers by more than 300 internet service providers, making them the most widely used Wi-Fi routers in the country, found in millions of American homes.
See also: Exploiting critical vulnerability in old D-Link DSL routers
It caused serious concern when Microsoft security researchers discovered that a group of hackers based in China were using vulnerabilities in the devices to carry out cyberattacks in the US. It was widely expected that the routers would be banned from sale in the US, but politics seemingly intervened. However, the battle is not over yet.
TP-Link routers account for about 65% of the U.S. market. Many people won't even know they have one in their home because branded versions generally carry the ISP's logo.
Security researchers discovered that it was being used by a China-based hacking entity, suspected of operating on behalf of the Chinese government.
A Microsoft analysis published in October found that a Chinese hacking entity maintains a large network of compromised network devices, primarily consisting of thousands of TP-Link routers. The network has been used by multiple Chinese actors to launch cyberattacks on Western targets, including think tanks, government agencies, non-governmental organizations, and Department of Defense suppliers.
See also: The US proposed a ban on TP-Link
It was also suggested that the devices were being sold at a loss specifically to get into American homes.
After three separate investigations opened in the Departments of Commerce, Defense, and Justice, it was widely expected that the devices would be banned from sale in the U.S. However, the White House reportedly postponed that plan ahead of a summit between Trump and China's Xi Jinping.
While the federal government may not be taking action right now, Texas is continuing the fight. Texas is suing Wi-Fi router maker TP-Link for misleadingly promoting the security of its products and giving Chinese hacking groups access to Americans’ devices, Attorney General Ken Paxton announced. Paxton initially began investigating TP-Link in October 2025.
Texas Governor Greg Abbott later banned state employees from using TP-Link products in January of this year.
See also: TP-Link patches vulnerabilities affecting Omada Gateways
TP-Link denies the allegations, saying the company is now owned by the US and its products are assembled in Vietnam. However, Texas argues that because the components are made in China, suppliers must comply with requests from Chinese intelligence agencies to install software that allows government access.
