Security researchers from UC San Diego and the University of Maryland discovered that vast amounts of satellite communications — including T-Mobile customer calls and texts — were transmitted unencrypted, allowing them to intercept sensitive data using just an $800 receiver system.
Over three years, the team captured private data from cellular networks, airline Wi-Fi, energy infrastructure, and even US and Mexican military communications, revealing locations and sensitive details.
The researchers expected encryption but found none, calling the lack of protection “security by obscurity.” After being notified, T-Mobile quickly fixed the issue in a small number of satellite-linked cell sites, while AT&T Mexico and Telmex also addressed similar vulnerabilities.
Experts warn the findings suggest a much wider global security risk for satellite-based communications.
Source: 9to5Mac