Overview
- TeleMessage, a modified version of Signal used by the U.S. government for message archiving, was breached by a hacker exploiting backend vulnerabilities.
- Stolen data includes messages from some users of the platform but does not include communications from cabinet officials like Mike Waltz or his direct contacts.
- The breach revealed that archived chat logs are not fully end-to-end encrypted between the app and the storage destination, creating significant security risks.
- Data tied to organizations such as U.S. Customs and Border Protection and financial institutions like Coinbase was reportedly included in the hacked material.
- Signal has reiterated that it cannot guarantee the security of unofficial app versions, and TeleMessage’s corporate owner has yet to respond to requests for comment.