Security Breach: Mike Waltz’s Modified Signal App Compromised

TeleMessage offers users the ability to archive their chats on secure messaging apps. However, a recent report revealed that the archived chat logs on TeleMessage are not end-to-end encrypted, potentially allowing hackers to access sensitive information such as certain message contents, government official contact details, and login credentials for the service’s backend.

While the hacker did not manage to obtain messages from high-profile individuals like Waltz and other cabinet members, screenshots of the stolen data reviewed by 404 Media revealed names, phone numbers, and email addresses of Customs and Border Protection officials. 404 Media even went as far as contacting some of the phone numbers, with one person confirming their name matched the information in the breached data, while another’s voicemail message also matched a name from the data.

After it was discovered that Waltz was using TeleMessage, 404 Media found that the company had essentially removed its website, which previously contained comprehensive information about its services, app capabilities, and even direct downloads for their archiving apps. The breach also exposed details about crypto exchange Coinbase and Canadian financial institution Scotiabank.

The Verge reached out to Smarsh, the parent company of TeleMessage, for further information regarding the security breach. However, as of now, there has been no response from the company.