Haaretz reveals Starlink tracking tech

Haaretz reported on May 12 that two Israeli-linked companies had developed commercial tools to locate Starlink terminals around the world and, in some cases, identify the people using them. The report said the systems do not break Starlink encryption or intercept traffic. (haaretz.com) Instead, they combine commercial data, device telemetry and location traces to map where a terminal is operating and to connect that activity to specific devices or people, according to accounts citing Haaretz’s reporting. (cyprus-mail.com) TargetTeam, a Cyprus-based company named in follow-on reports, markets a platform called Stargetz, according to Cyprus Mail and Cybernews, both citing Haaretz. (jpost.com) Sales materials described by those outlets said the system could monitor close to 1 million Starlink terminals worldwide, track activity from up to 5.5 million connected devices and had already “de-anonymized” about 200,000 terminals. The reporting lands as Starlink has become a critical communications backstop in war zones, under internet shutdowns and in remote areas where terrestrial networks are unavailable. Amnesty International’s Security Lab head Donncha Ó Cearbhaill told Haaretz that satellite internet can be the last available channel for people in places such as Sudan, Myanmar and Iran to call for help and document abuses. (haaretz.com) ### How are these tools said to work without “hacking” Starlink? Haaretz’s account, as relayed by other outlets, said the systems rely on “data fusion” rather than a breach of the satellite network. (cyprus-mail.com) Cybernews said that includes advertising identifiers, smartphone telemetry, browsing traces, social media activity and geolocation data that can be correlated with the place and time a Starlink terminal is active. Cyprus Mail reported that Haaretz said the technology maps the locations of terminals across the globe and then tries to identify the actual users connecting through them. That means the weak point is not the satellite link itself, according to the reports, but the digital exhaust from phones and apps used underneath the connection. (cyprus-mail.com) ### Which company and products have been named publicly? TargetTeam is the company most clearly identified in public follow-up coverage. Cyprus Mail said Haaretz named TargetTeam and said it was founded by former employees of Israeli cyber intelligence firms including Rayzone and Cognyte. (cybernews.com) The Jerusalem Post reported on May 12 that an Israeli-Cypriot cyber company was preparing to unveil Stargetz, a Starlink de-anonymizing tool, alongside a separate VPN de-anonymizing product called VPNz. That report said the presentation was expected at ISS World Europe, a trade conference focused on lawful interception and intelligence technologies. (cyprus-mail.com) ### What did the reporting say the systems can reveal? Sales claims cited by Cybernews said Stargetz can tie terminals to internet activity from millions of connected devices and, in some cases, to identifiable users. Cyprus Mail said Haaretz was shown a live demonstration with terminals displayed across the Middle East, the Arabian Peninsula, India, Russia, China and offshore clusters that were likely ships. (cyprus-mail.com) One sales pitch described by Haaretz framed ships as a target set. Cyprus Mail quoted a salesperson as saying, “The ship can hide, but the crew still needs porn and TikTok,” a reference to using crew devices and app activity to infer location even when a vessel disables its transponder. (jpost.com) ### Why does this matter beyond Starlink itself? Starlink is marketed by SpaceX as high-speed internet available “almost anywhere on Earth,” and the service is recommended on Starlink’s support site for U.S. civil, state, local and international civil government agencies. That reach has made the network important in conflicts, disasters and censorship environments, where users may assume satellite internet offers more protection from local surveillance than terrestrial networks do. (cybernews.com) Donncha Ó Cearbhaill told Haaretz that those assumptions matter most for civilians in shutdowns and blockades. His comments, quoted by Cyprus Mail, pointed to Sudan, Myanmar and Iran as places where satellite links can remain the only route to communicate externally. (cyprus-mail.com) ### What does this say about the privacy boundary around satellite internet? Starlink’s own privacy materials say the company collects technical information including IP address and service performance data, and its legal materials say it can respond to lawful subscriber-information requests from law enforcement when valid legal demands are made. (starlink.com) Those policies govern data held by the provider, but the Haaretz report described a different route: identifying users through commercial data and device-level traces outside the encrypted network path. The next public marker in the story is ISS World Europe, where The Jerusalem Post said TargetTeam was expected to present Stargetz and VPNz. (cyprus-mail.com) Haaretz’s original report remains the central account, and SpaceX or Starlink responses were not visible in the sources reviewed here. (jpost.com) (starlink.com)