Data of Kentucky users unlawfully accessed and transferred to China by Temu, according to the state's lawsuit claims
In a surprising turn of events, Kentucky Attorney General Russell Coleman has filed a lawsuit against the Chinese app Temu, owned by PDD Holdings, for alleged illegal data collection and privacy violations. The complaint was lodged in the Woodford County Circuit Court on July 17, 2025.
At the heart of the lawsuit is the claim that Temu, without the knowledge or consent of its users, illegally collects sensitive personal data and grants unfettered access to this data to the Chinese government. This accusation is a significant concern, as it poses significant privacy and security risks not only to users in Kentucky but also to a broader audience.
The lawsuit alleges that Temu's platform can potentially infect users' devices with malware, steal their personal data, and send it directly to authorities in China. Investigators have identified "code-level behaviors" in the Temu app that involve the collection of users' sensitive personal data in a manner that is not secure.
Moreover, the lawsuit accuses Temu of counterfeiting Kentucky’s iconic brands and using forced labor from Chinese ethnic minorities, violating U.S. trade policies. The complaint highlights consumer fraud, including misleading product advertisements, fake reviews, and unauthorized orders charged to customers’ payment information.
Temu, known for its heavily discounted products and aggressive advertising strategy, is also accused of collecting users' Wi-Fi and GPS information, as well as camera data without appropriate permission. The app has reportedly shared much of its code with Pinduoduo, Temu's predecessor app, which was banned in the U.S. for being malware.
Furthermore, Temu's operations are located in mainland China, where cybersecurity laws allow the government unfettered access to data owned by Chinese businesses. This raises concerns about the potential use of the collected data for surveillance or other purposes by the Chinese regime.
As of the date of the filing, Temu features dozens of what appear to be unlicensed products claiming to be from Kentucky brands, such as the University of Kentucky, University of Louisville, Buffalo Trace Distillery, and Churchill Downs.
The lawsuit asks for an injunction against Temu and is the latest instance of the app coming under scrutiny, mainly by Republicans, for its ties to China. Last year, 20 GOP state attorneys general demanded information from Temu's ownership about allegations brought by Congress that its China-based suppliers used forced labor.
Temu, which was Apple's most downloaded free app in 2023, according to TechCrunch, has a tagline of "Shop like a billionaire." Its parent company, PDD Holdings, originated in China but moved to Ireland.
The lawsuit is currently pending in the Woodford County Circuit Court, and Attorney General Coleman has emphasized the need for a strong legal defense against Temu’s practices, calling out the danger to Kentuckians’ data security and local economic harm.
Ashley Oliver, a reporter for our website Digital and FOX Business, is covering the Justice Department and legal affairs. More updates on this developing story will be provided as information becomes available.
- The lawsuit against Temu, a Chinese app owned by PDD Holdings, highlights concerns about its illegal collection of sensitive personal data and potential sharing of data with the Chinese government, posing significant risks to user privacy and security.
- The lawsuit against Temu also accuses the app of counterfeiting Kentucky's iconic brands, using forced labor from Chinese ethnic minorities, and engaging in consumer fraud, including misleading product advertisements and unauthorized orders.
- The lawsuit further alleges that Temu collects users' Wi-Fi and GPS information, as well as camera data without appropriate permission, a practice that has raised questions about the app's connection to its predecessor, Pinduoduo, which was banned in the U.S. for being malware.
- Given that Temu's operations are located in mainland China where cybersecurity laws allow the government unfettered access to data owned by Chinese businesses, the potential use of collected data for surveillance or other purposes by the Chinese regime is a significant policy-and-legislation concern in the realm of politics and general news, particularly in the context of crime-and-justice and finance.
