Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Protection

Arizona Attorney General Sues Chinese Online Retailer Temu Over Data Theft Claims

Arizona is the latest state to sue Temu and its parent company PDD Holdings over allegations that the Chinese online retailer is stealing customers’ data.

Temu China data theft lawsuit

Arizona Attorney General Kris Mayes announced Tuesday that Arizona is the latest state to sue Temu and its parent company PDD Holdings Inc. over allegations that the Chinese online retailer is stealing customers’ data.

Mayes said the app deceives customers about the quality of its low-cost products and collects what she described as a shocking amount of sensitive data without the consent of users, including GPS locations and a list of other apps on users’ phones.

According to the lawsuit, prosecutors are concerned about Temu being subject to laws in China that require Chinese companies to hand over data requested by the government, and that its code is designed to evade security reviews.

“It can detect everywhere you go, to a doctor’s office, to a public library, to a political event, to your friends’ houses,” Mayes said during a news conference. “So the scope of this invasion of privacy is enormous, and that’s why I consider it possibly the gravest violation of the Arizona Consumer Fraud Act that we have ever seen in Arizona.”

Arizona’s top prosecutor also said the state wants to protect businesses from being “ripped off” by the online retailer, alleging the company has copied the intellectual property of brands that include the Arizona Cardinals and Arizona State University.

Attorneys general in Kentucky, Nebraska and Arkansas have filed similar lawsuits in recent years.

Advertisement. Scroll to continue reading.

There have been legislative efforts at the federal level to counter China’s influence, especially when it comes to technology and intellectual property. But Mayes suggested there should be greater intervention by the federal government to protect consumers.

Mayes called the allegations against Temu more egregious than those that have been made against TikTok.

Through a forensic review, investigators in Arizona found the app’s code has portions recognized by experts as malware or spyware and allows exfiltration of data from a user’s mobile device while concealing that the app is doing so. The review also found in the app “large swaths” of previously banned code from the platform’s precursor version.

Mayes urged Arizonans to delete their Temu accounts, uninstall the app and scan their devices for malware.

Related: TikTok Faces Fresh European Privacy Investigation Over China Data Transfers

Related: Canada Gives Hikvision the Boot on National Security Grounds

Related: Vodafone Germany Fined $51 Million Over Privacy, Security Failures

Written By

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.

Register

AI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.

Register

People on the Move

Stephen Garcia has been named Chief Information Security Officer at BreachRx.

Kasper Lindgaard has been appointed Vice President of Security Strategy at CoreView.

Chaim Mazal has been named Chief Information Security Officer at GitLab.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.