Sign up to get Today’s Best Articles in your inbox
Join 350,000+ subscribers and keep yourself informed with a selection of
The Week’s most interesting, enlightening and entertaining stories - plus daily puzzles.
You are now subscribed
Your newsletter sign-up was successful
Want to add more newsletters?
An account already exists for this email address, please log in.
US and British spies 'hacked world's largest sim card maker'
Hack gave GCHQ and NSA access to billions of calls and mobile data, according to new Snowden leak
US and British spies hacked into the world's largest sim card manufacturer to gain access to billions of mobile phone voice calls and data around the world, according to the latest leak from National Security Agency (NSA) whistleblower Edward Snowden.
A special unit, including operatives from both the NSA and its British equivalent GCHQ, hacked into Gemalto, a Netherlands sim card manufacturer. The firm produces two billion sim cards a year for AT&T, T-Mobile, Verizon, Sprint and around 450 wireless network providers globally.
The unit – called the Mobile Handset Exploitation Team (MHET) – was set up in 2010 to exploit vulnerabilities in mobile phones, according to documents leaked to The Intercept.
The Week
Escape your echo chamber. Get the facts behind the news, plus analysis from multiple perspectives.
Join more than 350,000 subscribers and keep yourself informed with a selection of The Week’s most interesting, enlightening and entertaining stories - plus daily puzzles.
Join more than 350,000 subscribers and keep yourself informed with a selection of The Week’s most interesting, enlightening and entertaining stories - plus daily puzzles.
The team reportedly targeted the private email and Facebook accounts of specific Gemalto employees and planted malware (malicious software) on several of the company's computers, gaining access to "their entire network".
With this access, the spy agencies were able to steal encryption keys, used to protect the privacy of mobile phone communications, and secretly monitor voice calls and data without the knowledge of telecom companies and foreign governments.
The hacked keys "have the functional equivalent of our house keys," Mark Rumold, staff attorney at the Electronic Frontier Foundation, told The Guardian. "That has serious implications for privacy not just here in the US but internationally."
Rumold said there was "no doubt" that the NSA and GCHQ had violated Dutch law and suggested they had also broken the law in "many other territories" when they used the hacked keys.
Sign up to get Today’s Best Articles in your inbox
A free daily email with the day’s biggest news and analysis – and the best features from TheWeek.com
Gemalto said it had been totally oblivious to the penetration of its systems and was "disturbed" by what had happened.
Paul Beverly, executive vice president at Gemalto, told The Intercept: "The most important thing for me is to understand exactly how this was done, so we can take every measure to ensure that it doesn't happen again."
NSA declined to comment, while GCHQ said the UK's interception regime was "entirely compatible with the European Convention on Human Rights".
