Satellites leak unencrypted calls, texts, and military data

Photo - Satellites leak unencrypted calls, texts, and military data
A three-year study by researchers at the University of California, San Diego, and the University of Maryland has found that many satellites are transmitting sensitive information – including personal calls, text messages, and military communications – without encryption.
Using a setup costing about $800, the researchers intercepted satellite signals from a rooftop in San Diego and recovered data from geostationary satellites. They found that roughly half of the transmissions they analyzed carried unprotected information.

The intercepted data included voice calls and text messages sent through T-Mobile’s satellite connections, internal maintenance communications from Mexico’s state electric utility CFE, and tracking details from U.S. and Mexican military operations. Airline Wi-Fi metadata and corporate network traffic were also among the findings.

After being informed, T-Mobile and AT&T said they had secured the affected links. Some other organizations confirmed they had received alerts but did not specify when fixes would be applied.

The research team, led by computer scientists James Pavur and others, analyzed only about 15% of the geostationary satellites visible from their location. They said this limited scope suggests that similar vulnerabilities may exist in other parts of the world.
The findings were published under the title “Don’t Look Up.” The researchers shared their results with affected operators and released open-source tools so others could verify the security gaps in satellite communications.

Previous research has revealed similar vulnerabilities in satellite networks over the past decade. In 2020, cybersecurity experts from Oxford University demonstrated that satellite internet providers were transmitting unencrypted data, including email traffic and sensitive corporate files. Earlier studies also found that some weather and maritime satellites leaked GPS coordinates, ship tracking data, and even live video feeds from surveillance operations due to outdated communication standards.

Despite repeated warnings, many commercial and government satellite systems continue to operate on legacy infrastructure built before modern encryption became standard. Scientists say these systems often prioritize signal reach and reliability over data protection, leaving private and institutional communications exposed to anyone with the right receiving equipment.

Sebile Fane cut her teeth in blockchain by building tiny NFT experiments with friends in her living room, long before the buzzwords took hold. She’s driven by a curiosity for the human stories behind smart contracts — whether it’s a small-town artist minting her first token or a DAO voting on climate grants — and weaves technical insight with genuine empathy.