Can Fiber Optic Cables Be Tapped?

Why Encryption Alone May Not Be Enough

Every day, governments, banks, healthcare providers and critical infrastructure operators send sensitive data through fiber optic networks assuming encryption will protect it. But encryption only protects data until someone can break it. And collecting that data is often easier than most organizations realise.

Fiber optic cables have been treated as trusted infrastructure for decades. They shouldn’t be. A well-positioned adversary can tap a fiber link without cutting the cable, disrupting traffic, or triggering alarms.

Yes, fiber optic cables can be tapped. Fiber optic cable tapping is a well-documented, technically accessible attack, and it is precisely the kind of risk that organizations transmitting sensitive or long-lived data cannot afford to overlook.

How Fiber Tapping Works

The danger isn’t that an attacker reads your data immediately. It’s that they can quietly collect years of encrypted traffic and store it for future decryption. For organizations handling sensitive information with long confidentiality requirements, that creates a risk that persists long after today’s encryption standards have changed.

Optical fiber carries data as pulses of light rather than electrical signals, which is why it resists many traditional forms of electromagnetic eavesdropping. But light traveling through a fiber cable is not perfectly contained.

Techniques such as bend tapping exploit the fact that gently bending a fiber causes a small amount of light to escape through the cable's outer layer. An attacker can clip a small sensor onto the cable at this bend point and extract a usable copy of the signal. Often, this can occur without measurably disrupting the original transmission, and without ever cutting the cable.

More invasive methods, such as physically splicing into the cable, give attackers a stronger signal but carry a higher risk of detection, since they typically cause a brief, noticeable drop in signal strength. Because of this, patient, well-resourced adversaries tend to favor the quieter bend-tapping approach — particularly on dark fiber: unlit, unused fiber strands leased or owned privately, which often run through shared ducts, junction boxes, or third-party infrastructure with far less physical oversight than a carrier's core network.

Why this matters beyond the tap itself

Fiber tapping risk is not evenly distributed. It is highest where:
Cables run through physically unsecured or shared infrastructure (ducts, cabinets, cross-connects). Dark fiber is leased from third parties with limited visibility into physical access controls. Long-haul or metro links pass through multiple jurisdictions or carrier handoffs. The data in transit has long-term confidentiality requirements — financial records, health data, government communications, or intellectual property.

Building eavesdropping-proof communication

Physical security measures — locked cabinets, monitored conduits, tamper-evident seals — reduce opportunity but cannot eliminate the risk on links that span long distances or third-party infrastructure. Real fiber optic communication security means assuming the fiber itself may be compromised and protecting the information, not just the cable.

This is why organizations responsible for long-lived secrets are increasingly looking beyond traditional encryption alone. The challenge is no longer simply encrypting data. It’s knowing whether the communications channel itself has been compromised.

How Quantum Optics Jena helps

Quantum Optics Jena's QKD systems turn this principle into a deployable safeguard for your fiber links, including dark fiber and third-party infrastructure you don't fully control. Instead of relying on physical security alone, you gain a continuously monitored key exchange that tells you the moment a tap is attempted — not months or years later.

Not every fiber link carries the same risk.

Back to the Knowledge Hub overview