Skip to main content

NSA secretly taps into Google, Yahoo data centers, leaked documents show

nsa collecting google yahoo data drawing
Image used with permission by copyright holder

The National Security Agency has secretly tapped into the fiber optic networks that connect Google and Yahoo’s global data centers, reports the Washington Post. According to documents leaked by form NSA contractor Edward Snowden and unnamed “knowledgable officials,” this network interception allows the NSA to collect, “at will,” the communications and files of hundreds of millions of users, which likely includes many American citizens.

Wait – isn’t this old news, you ask? Nope. You’re thinking of PRISM, the program through which the NSA compelled a number of U.S.-based technology companies, including Google and Yahoo, to hand over users’ private data through the use of secret court orders issued by the Foreign Intelligence Surveillance Court. What we’re dealing with here is a whole different monkey – a program called MUSCULAR, which is allegedly a joint operation between the NSA and the U.K.’s intelligence agency, GCHQ.

Here’s how the whole thing works: Google and Yahoo both have data centers all over the world. These networks are used for internal communications and operations, but they are also connected to the larger Internet, and used to store and process data related to public accounts, like your Gmail emails or Flickr photos, for example. Multiple copies of your user data are often stored in these data centers, unencrypted, and passed back and forth between these so-called data “clouds.”

What the NSA has done through MUSCULAR is tap into links between these data centers that are located in foreign counties. According to the Post, the NSA claims to have the authority to assume that any data transferred in a foreign country is fair game for surveillance, thanks to an old executive order called 12333. The Post reports that, over a 30 day period, the NSA collected and processed 181,280,466 new records. Some of these records were metadata – the To, From, and Subject fields in an email, for instance – while other records included content, like emails, photos, files, and videos.

It is not known how much, if any, Americans’ private data is collected by the NSA through MUSCULAR. In a statement to the press, an NSA spokesperson said it is “not true” that “we collect vast quantities of U.S. persons’ data from this type of collection.” The NSA also says that it does not use Executive Order 12333 to circumvent legal restrictions on the agency.

According to Washington Post reporter Brian Fung, and Bloomberg reporter Trish Regan, NSA Director General Keith Alexander has refuted the Post’s report.

Neither Google nor Yahoo appear to have known about MUSCULAR. Google told the Post that it is “troubled by allegations of the government intercepting traffic between our data centers, and we are not aware of this activity.”

“We have long been concerned about the possibility of this kind of snooping,” a Google spokesperson said, “which is why we continue to extend encryption across more and more Google services and links.”

Yahoo said in a response to the report: “We have strict controls in place to protect the security of our data centers, and we have not given access to our data centers to the NSA or to any other government agency.”

The documents describing MUSCULAR include a hand-drawn diagram – adorned with a smiley face! – sketching out where and how the NSA intercepts Google’s data center communications. When the Post contacted two Google engineers about MUSCULAR, they reported “exploded in profanity” when they were shown the drawing.

Andrew Couts
Former Digital Trends Contributor
Features Editor for Digital Trends, Andrew Couts covers a wide swath of consumer technology topics, with particular focus on…
X now offers audio and video calls, but it’s easy to turn off
The new X sign replacing the Twitter logo on the company's headquarters in San Francisco.

A couple of months after landing the CEO job at X (formerly Twitter) in May, Linda Yaccarino said: “X will be the platform that can deliver, well ... everything.”

Part of that includes audio and video calls, which the company has just started to roll out for users globally.

Read more
How to delete or deactivate your Facebook account
Google Pixel Fold in Obsidian with Facebook filled screen after rotating.

Maybe you just need to take a break from using Facebook. Or maybe you haven't used your Facebook account in awhile and don't plan to in the future. Whatever your reasons, you should know that you have two clear options when it comes to doing away with Facebook.

If you just need a break and will likely need your account in the future, you can deactivate your Facebook account. If you've moved on to greener social media pastures or just don't need your account anymore, you can delete your Facebook account too.

Read more
YouTuber gets more than just clicks for deliberately crashing plane
YouTuber Trevor Jacob jumps from his plane shortly before it crashes.

YouTuber Trevor Jacob jumps from his plane shortly before it crashes. Trevor Jacob/YouTube

It was two years ago when YouTuber Trevor Jacob posted a dramatic video of his solo flight that ended with the plane crashing, though not before he jumped out of the single-engine aircraft to parachute to safety.

Read more