The Great SIM Heist: NSA & GCHQ Target Gemalto SIM Encryption Keys
On 19 February 2015 The Intercept, citing Snowden documents, reported that a joint NSA–GCHQ team had penetrated Gemalto, the world's largest SIM maker, to steal the Ki keys used to secure mobile communications; Gemalto said a 2010–2011 operation "probably happened" but denied massive key theft.
02Deep-Dive Technical Analysis
Each SIM's secret Ki is shared with the operator's AuC; whoever holds it can derive session keys from the RAND sent in clear over the air, enabling passive decryption of intercepted calls without operator cooperation. A 2010 GCHQ document described automated "Ki harvesting" by intercepting key files emailed or FTP'd between SIM vendors and operators, and cyberstalking Gemalto staff. Gemalto said secure key transfer was widespread by 2010 and only office networks were breached, and claimed 3G/4G were unaffected.
03Vulnerability & Exploit Flow
Bulk interception and network intrusion to obtain SIM Ki files in transit between manufacturer and operators.
04Recommended Defense & Mitigation Protocol
Encrypted, authenticated key-file transfer (e.g. PGP/HSM-based), minimal key retention by vendors, and AKA-based networks with OTA key diversification.
05Security Impact & Geopolitical Consequence
Revealed that the SIM supply chain, not just the air interface, is a target, pushing operators to encrypt personalisation key files end to end and to demand evidence of vendor key-handling security.
06Authoritative Standards & External References
07Related Topic Cluster Records
Master 5G Core, SS7 Defense & Subsea Cable Auditing
Ready to turn your historical knowledge into certified hands-on expertise? Register free on TelcoSec Academy to access interactive lab challenges, or consult our enterprise team for carrier-grade signaling assessments and portable BTS hardware.