Texas Attorney General Ken Paxton has filed two major lawsuits against Chinese-linked technology firms, accusing TP-Link and Anzu Robotics of deceiving consumers while exposing Texans to national security and cybersecurity risks tied to the Chinese Communist Party (CCP).
The back-to-back actions target networking equipment and drone products that Paxton alleges are effectively conduits for Chinese state access to American data and infrastructure.
The first lawsuit names TP-Link Systems Inc., the US-based arm of the global networking giant founded in Shenzhen, China. The second, filed a day later, targets Anzu Robotics, LLC, an Austin-based drone company accused of acting as a “passthrough” entity for blacklisted Chinese drone manufacturer DJI.
Both complaints were brought under the Texas Deceptive Trade Practices Act (DTPA), with Paxton seeking injunctive relief, civil penalties, and other remedies.
TP-Link: Supply chain ties and exploited vulnerabilities
In the petition against TP-Link, the state of Texas alleges that the company misled consumers by marketing its routers and smart home devices as secure and largely detached from China, while maintaining deep operational and supply-chain ties to the country.
Although TP-Link has long advertised its products as “Made in Vietnam,” the lawsuit claims that nearly all core components are sourced from China and that the company continues to operate research, development, and manufacturing facilities in Shenzhen, Dongguan, and other Chinese cities. According to the complaint, Chinese subsidiaries linked to TP-Link have received state subsidies and other benefits, and shipments of networking equipment have continued to originate from Shanghai as recently as January 2026.
Texas further alleges that TP-Link devices have been repeatedly exploited in state-sponsored hacking campaigns. The complaint references reporting from Microsoft, CISA, and other security researchers tying vulnerable TP-Link routers to Chinese threat actors, including activity associated with Volt Typhoon and other espionage operations.
TP-Link, which controls a significant share of the US consumer router market and is widely sold through major retailers, has publicly maintained that its US operations are independent from its Chinese counterpart. However, Texas argues that the company’s structure still subjects it to China’s 2017 National Intelligence Law, which can compel companies to cooperate with state intelligence efforts.
The lawsuit also challenges TP-Link’s privacy disclosures for mobile apps such as Kasa Smart and Tether, claiming the company failed to clearly inform users that data collected through its platforms could be subject to PRC legal demands.
The action comes months after federal agencies proposed banning TP-Link routers from the US market following a national security review.
Anzu Robotics: A “repainted” DJI drone
The second lawsuit centers on Anzu Robotics and its flagship Raptor T drone, which Texas describes as “a wolf in sheep’s clothing.” Filed in Collin County, the complaint alleges that Anzu marketed its drones as American-owned and secure alternatives to Chinese-made DJI products, while in reality selling rebranded DJI hardware and firmware.
According to the petition, Anzu’s CEO, Randall Warnas, formerly employed by DJI, acknowledged in a 2024 interview that the partnership was conceived after DJI faced mounting legislative bans at the state and federal levels. The complaint cites findings from security researchers and the House Select Committee on the CCP concluding that the Raptor T is “essentially a DJI Mavic 3 painted green,” with identical hardware, firmware signed using DJI’s cryptographic keys, and a relabeled DJI RC Pro remote controller.
FCC teardown photos referenced in the filing reportedly show DJI-branded components inside Anzu’s drones, while the firmware and software stack rely heavily on DJI’s SDK. Texas further claims that DJI retains control over firmware signing keys, meaning it could theoretically push updates or access data, undermining Anzu’s claims that customer data is isolated from DJI.
Anzu’s website had promoted the Raptor T as featuring “U.S.-based operations,” AES-256 encryption, and software supported by American servers. However, the lawsuit alleges that these representations omitted key details about DJI’s ongoing involvement, including payments per unit and “priority technical support” from DJI.
DJI, headquartered in Shenzhen, dominates the global drone market and has been placed on the US Commerce Department’s Entity List, designated by the Department of Defense as a Chinese Military Company, and sanctioned by the Treasury Department over alleged involvement in surveillance operations in Xinjiang. The FCC recently expanded its Covered List to include foreign-manufactured drones, further tightening regulatory scrutiny.
Leave a Reply