Logo of TP-Link appears in Fuyang, China. Another danger lurks amidst the TikTok ban frenzy, with Chinese tech playing a significant role. Experts fear China can exploit TP-Link routers to launch attacks on critical infrastructure or steal sensitive information.
US Representative Raja Krishnamoorthi and Representative John Moolenaar sent a letter to the US Department of Commerce last summer, expressing concerns over “unusual vulnerabilities” and compliance with PRC law. They highlighted the alarming possibility that China could use TP-Link routers to perpetrate extensive cyberattacks in the US.
Despite their letter, no action has been taken, and Krishnamoorthi is worried. He pointed to the government’s “rip and replace” plan with Huawei network equipment as a precedent that could be followed. According to his data, TP-Link has a 65% share of the US router market, making it a significant concern.
Experts emphasize that the problem is not limited to federal government agencies but also affects state and local utilities, as well as individuals who use TP-Link routers at home. Routers can compromise browsing history, family and employer information, and even government agencies’ secure data.
The US Department of Commerce has yet to respond on potential action, and Amazon has declined to comment on whether it plans to pull the routers. TP-Link has denied any cybersecurity vulnerabilities and stated that it does not sell router products in the US, with most made in Vietnam.
Some experts believe that if a ban is to be implemented, it will be focused on national security concerns rather than home internet consumers. Guy Segal, vice president of corporate development at cybersecurity services company Sygnia, suggests starting by banning use in the federal and defense sectors.
Others, like Matt Radolec, vice president of incident response and cloud operations at Varonis, stress the importance of unencrypted communication, citing a general lack of awareness among the public. He believes that consumers should be aware of the implications to their personal privacy.
A consensus on how to combat this problem remains elusive, but it is clear that the issue of unencrypted communication is a pressing concern that requires attention from government agencies, businesses, and individual consumers.