Satellites Are Leaking Secrets

Satellites Are Leaking Secrets

In a revelation that sounds like science fiction — but isn’t — researchers at the University of California, San Diego, and the University of Maryland uncovered that satellites orbiting Earth are broadcasting massive amounts of unencrypted data.

Using less than $800 in consumer-grade equipment, they intercepted everything from U.S. military communications to T-Mobile users’ calls and text messages, critical infrastructure data, and even corporate emails from global companies.

The finding is a stark reminder that our global digital infrastructure — even the parts in orbit — is only as strong as the weakest link.

The $800 Wake-Up Call

From a rooftop in San Diego, the researchers set up a simple satellite dish, a tuner, and some off-the-shelf software. Over three years, they collected a trove of unprotected signals from geostationary satellites — transmissions that were supposed to be secure.

What they found shocked even them:

• Thousands of unencrypted phone calls and text messages sent through T-Mobile’s satellite backhaul connections.

• Military and law enforcement communications revealing the location of helicopters, naval vessels, and command posts.

• Utility data from Mexico’s state-owned power company, including customer information and safety alerts.

• Corporate data from banks, retailers, and airline systems transmitting through unprotected satellite links.

In some cases, the transmissions included raw network data, decryption keys, and control signals — all sent in the clear, accessible to anyone who decided to “look up.”

The Problem: Security by Obscurity

The researchers titled their study “Don’t Look Up” — both as a nod to the 2021 film and a blunt critique of how the satellite industry has handled security.

For decades, many satellite providers relied on a simple assumption:

“No one will ever bother to listen.”

That assumption failed.

Roughly half of all geostationary satellite signals remain unencrypted. The result is a floating goldmine for hackers, intelligence agencies, and corporate espionage groups — all accessible with cheap tools and basic know-how.

How Bad Is It?

If a university research team can intercept this data with an $800 setup, what do you think well-funded cybercriminals or foreign governments can do?

The reality is chilling:

• Satellite links are widely used for “backhaul” — connecting remote cell towers, oil rigs, and naval operations back to corporate or military networks.

• These systems often lack encryption or use outdated algorithms vulnerable to interception.

• Hackers could easily replicate this study and access sensitive data from anywhere within a satellite’s coverage area — potentially 40% of the planet.

This isn’t just an academic exercise. It’s a global vulnerability map that bad actors may already be exploiting.

Lessons for Businesses and Governments Alike

Whether your company operates a satellite, a cloud service, or a small remote office, the message is the same:

Never assume your data is safe just because it’s far away.

Here’s what organizations should take away from this:

1.

Encrypt Everything, Everywhere

End-to-end encryption isn’t optional. Data at rest, in transit, and in orbit must be secured with strong, modern encryption standards.

2.

Validate Vendor Security

Many of the leaks came from third-party service providers and telecom vendors. Always demand transparency about how partners handle your data — including satellite, cellular, and IoT traffic.

3.

Perform Regular Security Audits

Don’t rely on assumptions. Conduct penetration tests and security reviews for every data transmission pathway, no matter how “indirect” it seems.

4.

Build for Zero Trust

The idea that distance equals safety is outdated. Adopt a Zero Trust architecture where every device, connection, and signal must authenticate and verify — even if it’s orbiting 22,000 miles above Earth.

What This Means for SMBs

You don’t need a satellite to be at risk. The same principle applies to every business with cloud, Wi-Fi, or remote connections. If your vendors, apps, or systems aren’t encrypted end-to-end, you’re vulnerable.

Small businesses often trust that “enterprise-grade” systems handle it all. But as this study proves — even billion-dollar networks can forget the basics.

That’s where an MSP makes the difference. A professional MSP ensures your configurations, data transmissions, and backups are secure — on Earth or beyond it.

The Bottom Line

This wasn’t a sophisticated hack. It was an $800 science project that exposed a global failure in cybersecurity hygiene.

Our world depends on invisible connections — satellites, networks, APIs — and every one of them is a potential breach point. The question isn’t if someone’s listening. It’s who.

⸻

70% of all cyber attacks target small businesses, I can help protect yours.

#CyberSecurity #Encryption #MSP #SatelliteSecurity #ZeroTrust