Study Reveals Satellite Networks Transmit Data Without Encryption, Making Interception Easy

A new study has highlighted just how vulnerable data transmission is over geostationary satellites. Using off-the-shelf equipment available to anyone, U.S. researchers managed to intercept a massive trove of information that was being broadcast in the clear.

Over three years, a team from the University of San Diego collected signals from dozens of satellites using just a standard satellite dish and a receiver—a setup with a total cost of around $800. This did not require any hacking or interference with the satellites' operation; the process was entirely passive, meaning the researchers were simply listening in on the satellite broadcasts.

What they uncovered was a stream of data assumed to be confidential. The intercepted information included personal SMS messages and voice calls from a major telecom provider, internet traffic from airline passengers, and operational data from energy companies and oil pipelines. Notably, the researchers also intercepted military and law enforcement communications that revealed the location of personnel and assets.

The researchers explain that the core issue is a lack of encryption at the satellite link level. Many companies and organizations, particularly in remote regions, use these channels to transmit data under the false assumption they are secure by default. In reality, a single satellite signal can cover up to 40% of the Earth's surface, making the information accessible to anyone with the right gear.

Following these discoveries, only a handful of the affected organizations have implemented encryption. Experts warn that on a global scale, the situation remains largely unchanged.

For the average user, the advice is simple: don't rely on the security of open networks. Using VPNs for internet traffic and end-to-end encryption for calls and messages can mitigate the risk. For organizations, however, the conclusion is clear: any data sent via satellite must be encrypted at all levels, treating the communication channel as inherently insecure and public.