In what could be a painfully expensive rebuke to Google, the U.S. Court of Appeals for the Ninth Circuit ruled Tuesday that the company can be sued under the Wiretap Act for sniffing out data from home Wi-Fi networks.

The ruling potentially exposes Google to many millions, if not billions, in statutory damages and attorney fees, though the litigation is still in early stages.