Gemalto

Gemalto
source
Name	Gemalto
Type	Public (former)
Fate	Acquired by Thales Group
Founded	2006
Defunct	2019 (acquisition completion)
Headquarters	Amsterdam, Netherlands
Area served	Worldwide
Key people	Philippe Kahn (founder association), Olivier Piou (former CEO), Thierry Breton (related industry figure)
Industry	Information technology, Telecommunications, Security
Revenue	€3.1 billion (2017)
Num employees	c.15,000 (2018)

Gemalto was a multinational digital security company that specialized in secure personal devices, identity management, and digital payment technologies. Formed in the mid-2000s through consolidation of European smart card and security firms, the firm became a significant supplier to telecommunications carriers, financial institutions, and government identity programs before its acquisition. Gemalto combined cryptographic hardware, software platforms, and services to deliver solutions for mobile operators, banks, and national identity projects.

History

Gemalto originated from a 2006 merger that combined leading European companies active in smart cards and secure elements, building on legacies from firms such as Axalto, Gemplus International, and earlier entities linked to Schlumberger's smart card activities. Throughout the late 2000s and 2010s the company expanded by acquisition and direct contracts, involving partnerships with multinational corporations like Vodafone, Mastercard, Visa Inc., and governments across India, Brazil, and France. Leadership transitions included executives with backgrounds at Nokia, Orange S.A., and Philips, and Gemalto navigated industry shifts arising from the rise of mobile devices from firms such as Apple Inc. and Samsung Electronics. In 2019 Gemalto was acquired by Thales Group in a high-profile transaction that integrated the company's identity and security portfolios with Thales' aerospace and defense technology offerings.

Products and Services

Gemalto's portfolio encompassed a wide range of hardware and software products. Core offerings included secure elements and smart cards used by payment networks like Visa Inc. and Mastercard; embedded SIM (eSIM) and remote SIM provisioning solutions for mobile network operators such as AT&T, T-Mobile US, and Telefónica; and machine-to-machine connectivity modules employed in the Internet of Things deployments by firms including Siemens and Bosch. For government and civil identity programs the company delivered national identity cards, e-passports interoperable with standards from ICAO, and digital identity management platforms integrated with agencies like UNHCR and national ministries. In financial services Gemalto supplied point-of-sale terminals alongside authentication and tokenization services used by banks such as HSBC and Deutsche Bank. Enterprise solutions included access control and multifactor authentication integrated with directory services from Microsoft and network infrastructure from Cisco Systems.

Technology and Innovation

Gemalto invested in cryptographic research, secure element hardware, and software platforms to support public-key infrastructures and mobile security. The company worked on standards and interoperable implementations related to GlobalPlatform specifications, ISO/IEC smart card standards, and mobile industry specifications from the GSMA. It developed Java Card-based applets and collaborated with semiconductor manufacturers including NXP Semiconductors and Infineon Technologies to produce secure elements. Innovations addressed secure mobile payment schemes influenced by initiatives from Apple Pay, Google Pay, and tokenization frameworks promoted by EMVCo. Gemalto also pursued cloud-based credential management and digital rights management projects linked to content platforms such as Netflix and Amazon (company), and engaged with cybersecurity research communities including ENISA and academic groups at institutions like École Polytechnique and TU Delft.

Corporate Structure and Ownership

As a publicly traded entity, Gemalto was listed on Euronext Amsterdam and had a shareholder base including institutional investors from France, United States, and United Kingdom markets. Its management and board comprised executives and directors with prior affiliations to multinational corporations such as Orange S.A., Thales Group (prior to acquisition), and Schneider Electric. The 2019 acquisition by Thales Group followed strategic consolidation trends that brought Gemalto's identity, authentication, and secure element capabilities under Thales' broader defense, aerospace, and security business lines. Post-acquisition, operations and product lines were reorganized to align with Thales' corporate divisions and global programs linked to NATO procurement and European security frameworks.

Controversies and Security Incidents

Gemalto faced scrutiny over alleged security breaches and surveillance-related incidents. Notably, investigative reports claimed that national intelligence agencies had targeted manufacturers of SIM cards and secure elements, citing operations involving National Security Agency and Government Communications Headquarters practices; these allegations prompted parliamentary inquiries in countries such as France and discussions within the European Parliament. The company publicly disputed certain claims while confirming active cooperation with lawful government requests in accordance with applicable laws like those in Netherlands and France. Separate technical analyses by independent researchers and firms from Krebs on Security-adjacent communities highlighted vulnerabilities in some implementations of over-the-air provisioning and cryptographic key management, prompting firmware updates and security audits influenced by standards bodies such as ISO and ETSI. These incidents accelerated industry-wide focus on supply-chain security, leading to engagement with certification schemes from Common Criteria and managed-security providers including Deloitte and PwC.

Category:Technology companies