Two U.S. lawmakers, John Moolenaar and Raja Krishnamoorthi, have raised concerns about the potential cybersecurity risks posed by TP-Link, a Chinese company specializing in WiFi routers. In a letter addressed to the Commerce Department, the lawmakers urged an investigation into TP-Link and its affiliates, fearing that their routers could be exploited to launch cyberattacks against the U.S.
The Commerce Department acknowledged receipt of the letter and committed to providing a response in due time.
TP-Link, founded in China in 1996, is one of the largest global sellers of WiFi routers. Despite its market success, Moolenaar and Krishnamoorthi are particularly concerned about its connection to China and the possible national security risks this entails.
Although specific details about how TP-Link’s devices could be used in cyberattacks were not provided, the lawmakers cited vulnerabilities that had already been exploited in targeting European government officials.
This concern is not without precedent. In 2022, both the U.S. Cybersecurity and Infrastructure Agency and the security firm Check Point identified vulnerabilities in TP-Link routers that could be leveraged by hackers for malicious purposes.
Check Point further reported that Chinese government-backed hackers had used malware implanted in TP-Link devices to attack foreign officials in Europe, exacerbating worries over the company’s potential security risks.
The issue comes amid rising tensions between the U.S. and China, particularly regarding cyber threats. Past incidents, such as the U.S. and its allies dismantling a Chinese state-sponsored hacking campaign known as Volt Typhoon, highlight how Chinese hackers have attempted to use privately owned routers, including those from Cisco and NetGear, to infiltrate American infrastructure.
These ongoing security threats are driving U.S. lawmakers to scrutinize Chinese technology companies more closely.
The Commerce Department’s investigation could lead to restrictions or even bans on TP-Link products if the lawmakers’ concerns are validated. The Chinese Embassy, responding to the situation, has urged that accusations be supported by solid evidence rather than speculation.
This incident also draws parallels to the ongoing scrutiny of TikTok, another Chinese tech company, which has faced similar accusations of posing security threats to U.S. citizens and government infrastructure.