TP-Link sold a “100% safeguard” for your home network. Four states just called that a lie and pointed at China. Florida’s lawsuit, filed October 6, says TP-Link routers have been exploited in Chinese state-sponsored hacking campaigns, including Volt Typhoon and Flax Typhoon. Many of those routers cannot auto-update their firmware. Some are so outdated that TP-Link stopped supporting them entirely. TP-Link told customers it had fully separated from its Chinese roots and now operates as an independent US company making routers in Vietnam. Florida says that is misleading: only 0.5% of components by value are sourced in Vietnam. The rest comes from or through China. In June 2026, the Pentagon designated TP-Link’s Chinese entity a Chinese military company operating in the US. TP-Link controls at least 60% of the US retail market for home and small-office routers, up from about 10% in 2019. That is the majority of American Wi-Fi networks running through a company that four state attorneys general say misrepresented its security and its ties to Beijing. Montana, Nebraska, and Iowa filed similar suits the same day. Texas filed in February. TP-Link calls the claims false and says it will fight them in court. If this is the device sitting between your home and the internet, “trust us” is not a security plan.