Risk Alert: Unauthorized Crew Connections to Starlink and VSAT

Risk Alert: Unauthorized Crew Connections to Starlink and VSAT

Thank you for your continued support.

We are writing to bring an important security matter to your attention regarding the unauthorized use of vessel communication networks.

Recently, we have received reports of incidents where crew members are unauthorizedly connecting their personal devices or Wi-Fi access points directly to upstream Starlink or VSAT networks to bypass authorized systems. Even though the onboard communication environment has improved across vessels, crew demand for internet access remains strong. Consequently, we are seeing a gradual increase in these unauthorized connections.

The Risk to Your Vessel

By design, connecting a PC directly to the upstream link allows for immediate internet access. It appears that crew members who have discovered this are sharing the know-how to bypass our traffic control systems, such as ORiON Plus and carrier boxes. While this may seem like a simple shortcut for personal internet use, it poses a severe threat:

Excessive Data Consumption
Unmonitored direct connections can rapidly drain upstream data allowances.

Cybersecurity Vulnerabilities
Bypassing control devices strips away essential network protections, exposing the entire vessel’s systems to critical cyber threats.

Recommended Actions

Educating crew members on IT compliance is an important step, but implementing physical and technical restrictions are crucial to stopping this behavior.

While there is a slight trade-off between strict security locking and the ease of network recovery during troubleshooting, we can configure effective countermeasures to block these unauthorized bypasses.

If you are concerned about your current network security or would like to discuss implementing these preventative measures, please do not hesitate to contact us.

We sincerely appreciate your continued trust in ORCA and look forward to supporting your needs.

Thank you & best regards,