Bluetooth Ghosting Exposes Dutch Frigate: How Personal Phones Cracked Military Security

Post date: April 19, 2026 · Discovered: April 19, 2026 · 3 posts, 33 comments

A Bluetooth tracker, seemingly mailed inside an electronic greeting card, leaked the precise location of a Dutch navy frigate. The incident prompted authorities to ban such electronic cards because they bypassed standard X-ray screenings meant for physical packages.

Commenters mapped out the attack vector: 'colournoun' detailed that the tracker emits a low-energy Bluetooth announcement. A nearby iPhone overhears this signal, then transmits the tracker ID and location back to Apple via cell or Wi-Fi. Critics like 'RickRussell_CA' noted that if active-duty ships cannot control personal phones, their security protocols are critically deficient. 'Tiresia' suggested the Dutch bureaucracy's soft approach, or 'gedoogbeleid', enabled this failure.

The clear consensus points away from the tracker's failure and squarely at operational procedure. The vulnerability lies in allowing unsecured personal electronics, like smartphones, aboard sensitive military vessels. The failure was one of protocol, not hardware.

Key Points

SUPPORT

The vulnerability was the allowance of personal electronics on military vessels.

Most users agree the failure was operational security, not the tracker itself.

SUPPORT

The technical mechanism for data leakage was outlined.

'colournoun' confirmed the process: BLE announcement heard by iPhone, which relays data to Apple network.

SUPPORT

Electronic greeting cards bypassed standard screening.

The 'unknownuserunknownlocation' noted the Dutch postal service treating e-cards like standard mail, skipping X-ray checks.

SUPPORT

Ship security protocols are fundamentally lacking.

'RickRussell_CA' argued that if modern ships cannot control personal phones, their security is poor compared to terrestrial facilities.

MIXED

Bureaucratic tolerance enabled the exploit.

'Tiresia' speculated that the Dutch tendency toward 'gedoogbeleid' (tolerating poor policies) contributed to the lapse.

Source Discussions (3)

This report was synthesized from the following Lemmy discussions, ranked by community score.

212
points
Bluetooth tracker hidden in a postcard and mailed to a warship exposed its location — $5 gadget put a $585 million Dutch ship at risk for 24 hours
[email protected]·26 comments·4/18/2026·by remington·tomshardware.com
94
points
Bluetooth tracker hidden in a postcard and mailed to a warship exposed its location — $5 gadget put a $585 million Dutch ship at risk for 24 hours
[email protected]·10 comments·4/19/2026·by BrikoX·tomshardware.com
5
points
Opsec oopsie: Dutch navy frigate location outed by mailing it a Bluetooth tracker
[email protected]·0 comments·4/17/2026·by lemmydev2·theregister.com