SecurityNot yet confirmed elsewhere1 publisher2 min readPublished
21 state attorneys general ask FCC to resolve TP-Link's China ties before approving new routers
Nebraska Attorney General Mike Hilgers led 21 states in asking the FCC to address TP-Link's China ties before it approves new router models. Nebraska's office puts TP-Link at 60 percent or more of the US retail market for Wi-Fi systems and small-office routers.
The Watch · Security desk

What happened
- A lawsuit filed Tuesday over state-law violations tied to TP-Link's deceptive statements about its routers' privacy and security preceded the letter.
- The letter says TP-Link has ongoing ties to the Chinese military and relies on major research, development and manufacturing operations in China.
- The FCC's March 23, 2026 Public Notice, quoted in the release, says compromised routers can enable network surveillance, data exfiltration, botnet attacks and unauthorized access to government or business networks.
Why it matters
- decision The FCC has to choose whether to take up the coalition's supply-chain questions before it rules on the conditional approval, or to rule first.
- constraint Any near-term effect lands on new TP-Link models awaiting conditional approval, because the letter attaches to that one pending request.
- precedent The states paired a consumer-protection suit with a federal-approval letter, and that sequence is available against any vendor with a request pending at the FCC.
The ask is about sequence. Nebraska's release says the coalition's security concerns "must be addressed before a decision is made on TP-Link's request for conditional approval" [5]. Hilgers said, "Consumers should be aware of these risks and the FCC should address them before authorizing these new routers for sale in U.S. markets." [3] Twenty states are named as joining Nebraska, which makes 21 signatories [4][6].
Everything in the release comes from one publisher, the Nebraska attorney general's office. The military-ties and attack claims are the coalition's allegations, stated as the coalition states them [7][11]. The attack chain the release outlines runs from unauthorized access to administrator control to enrollment in an illegal botnet, attributed to Russian intelligence and Chinese state actors [11]. The release does not cite a specific vulnerability, campaign or procurement restriction, so an operator sizing exposure gets no CVE to patch against from this document.
The Vietnam plant is the coalition's evidence that relocation did not break the dependency. The release says a vast majority of the plant's components are imported from or through China and that its builder has ties to the Chinese military [8].
The lawsuit and the letter are separate tracks, and in our view they need different proof. The suit, filed Tuesday, concerns what TP-Link told consumers about privacy and security [9]. The letter concerns military ties and the company's research, development and manufacturing in China [7].
What to watch
- Whether the FCC rules on TP-Link's conditional approval request and whether its decision addresses the supply-chain concerns in the letter.
- TP-Link's response to the Tuesday lawsuit and the letter, and any named vulnerability or campaign tied to the botnet attacks the release describes.
- Whether more state attorneys general sign on or file their own actions beyond the 21 in the coalition.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence30
- Adoption
- Insufficient
- Hype gap
- Insufficient
- Incentives70
- Confidence40
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Nebraska Attorney General Mike Hilgers led a coalition of 21 state attorneys general in a letter to the FCC regarding TP-Link's request for conditional approval to sell new router models in the United States.
- [2]
The FCC's March 23, 2026 Public Notice said: "Compromised routers can enable in-depth network surveillance, data exfiltration, botnet attacks, and unauthorized access to U.S. Government or American businesses' networks."
ReportedSupportedSource: FCC Public Notice of March 23, 2026, as quoted in the Nebraska Attorney General's releaseView cited source - [3]
Attorney General Hilgers said: "TP-Link's products and systems still have strong connections to China, and its supply chain continues to be intertwined with China's state-sponsored technology ecosystem. Consumers should be aware of these risks and the FCC should address them before authorizing these new routers for sale in U.S. markets."
ReportedSupportedSource: Nebraska Attorney General Mike Hilgers, in the office's releaseView cited source - [4]
Attorneys general from Alabama, Alaska, Arkansas, Georgia, Idaho, Indiana, Iowa, Kansas, Kentucky, Louisiana, Montana, North Dakota, Ohio, Pennsylvania, South Carolina, South Dakota, Tennessee, Texas, Utah, and West Virginia joined Hilgers in sending the letter.
- [5]
The release says the ongoing relationships with China create serious security concerns that must be addressed before a decision is made on TP-Link's request for conditional approval.
- [6]
The 20 states listed as joining Nebraska plus Nebraska itself make 21 signatories, matching the stated coalition size.
- [7]
The letter addresses concerns that TP-Link has ongoing ties to the Chinese military and relies on major research and development and manufacturing operations in China.
ReportedContestedSource: Nebraska Attorney General's office release describing the letterView cited source - [8]
TP-Link recently constructed a manufacturing plant in Vietnam; a vast majority of the components used at the plant are imported from or through China, and the plant was constructed by a contractor with ties to the Chinese military.
ReportedContestedSource: Nebraska Attorney General's office release describing the letterView cited source - [9]
The letter follows a lawsuit filed on Tuesday to address state law violations related to TP-Link's deceptive statements to consumers regarding its routers' privacy and security.
- [10]
TP-Link controls at least 60 percent of the U.S. retail market for Wi-Fi systems and small office/home-office routers.
- [11]
TP-Link routers have been implicated in cyber-attacks by Russian intelligence and Chinese state actors, in which unauthorized access to the routers enabled hackers to gain administrator access and conscript the routers into an illegal botnet.
Sources
1 independent publisher whose own reporting we read for this story.
- Nebraska OAG
protectthegoodlife.nebraska.gov
1 article · October 11, 2026
Topics and entities
Follow any of these and your For You feed starts watching them — no settings page required.
Topics
- Technology RegulationFollow
- Router and edge device securityFollow
- Vendor and Supply Chain SecurityFollow