Adafruit Pauses Blog After Flux.ai Legal Threat Over Security Disclosure

Adafruit disclosed receiving a demand letter on May 22, 2026 from Fenwick & West partner Jonathan Lenzner, representing PCB design firm Flux.ai. The letter pressures Adafruit to drop a planned article about Flux, alleging the piece would make false and defamatory claims about the company’s intellectual property, traction, and user numbers, and invokes the Computer Fraud and Abuse Act against Adafruit’s reporting.

Adafruit counters that it only accessed data Flux had inadvertently exposed through a server misconfiguration, framing its work as responsible disclosure on a matter of public security interest. CFAA claims against researchers who view publicly reachable data have historically been contentious, and the choice of a former FBI chief of staff to send the letter signals an aggressive posture.

While rejecting the letter’s assertions, Adafruit has paused all blog publishing while it weighs a response. The episode revives familiar tension between vendors embarrassed by their own exposures and the security community’s norms around disclosing them.