Reported Breach of Mike Waltz’s Modified Signal Application

According to 404 Media, a hacker managed to compromise the contents of messages and contact details of certain government officials.

The unauthorized access involved direct messages and contact lists from TeleMessage, an Israeli firm providing tailored versions of popular communication apps like Signal, WhatsApp, and Telegram to U.S. government entities.

Vulnerability Exposure

TeleMessage enables users to archive conversations within secure messaging platforms. However, the hacker identified that these stored chat logs were not secured by end-to-end encryption. This flaw granted access to certain message contents, official contact details, and backend login information.

Impacted Officials

While messages from Mike Waltz and other cabinet members were not intercepted, the leaked screenshots featured names, phone numbers, and emails belonging to Customs and Border Protection officials. Attempts made by 404 Media to verify these contacts resulted in self-confirmations and matching voicemail greetings.

Security Concerns Arise

The spotlight on communications security for government personnel intensified following Waltz's accidental inclusion of The Atlantic's editor-in-chief in a Signal group chat that deliberated military actions in Yemen in March.

Website Content Removal

Following the identification of Waltz using TeleMessage, 404 Media discovered a significant alteration on the company's website, which had previously provided insights into the functionalities of their services, including app capabilities and direct download options for archiving purposes.

Additional Information Leaked

The compromised data reportedly also included intel on the cryptocurrency exchange platform Coinbase and Scotiabank, a Canada-based financial institution.

Attempts to engage with Smarsh, TeleMessage’s parent organization, for further details by The Verge were not met with prompt responses.