A hacker breached TeleMessage, an Israeli company that provides modified versions of Signal and other messaging apps to U.S. government customers for message archiving, and stole customer data. The stolen material includes contents from some direct messages and group chats sent using TeleMessageâs Signal clone, as well as TeleMessage-modified versions of WhatsApp, Telegram, and WeChat.
TeleMessage drew attention after Mike Waltz was seen using the tool during a cabinet meeting with President Trump. The breached data reflects that Waltzâs chats on the app included recipients whose identities appear to be Marco Rubio, Tulsi Gabbard, and JD Vance, but the hacker did not obtain messages belonging to cabinet members, Waltz, or his conversation counterparts.
The breach indicates the archived chat logs were not end-to-end encrypted between the modified messaging app and the ultimate archive destination controlled by the TeleMessage customer. Screenshots of messages and backend systems show hacked material included data related to Customs and Border Protection, Coinbase, and other financial institutions.