A hacker has exploited a vulnerability in TeleMessage, a company that provides modified versions of encrypted messaging apps, to extract archived messages and data related to U.S. government officials and companies that used the service, according to a report by 404 Media.
TeleMessage, owned by Smarsh, offers its clients a way to archive messages, including voice notes, from encrypted apps such as Signal, Telegram, and WhatsApp. The company’s service came under scrutiny last week after it was revealed that former U.S. National Security Adviser Mike Waltz was using TeleMessage’s modified version of Signal.
The hacked data included contents of messages, contact information of government officials, and backend login credentials for TeleMessage. Data related to U.S. Customs and Border Protection, crypto exchange Coinbase, and financial service providers like Scotiabank were also extracted by the hacker.
Did the Pentagon leak war plans on Signal?
The hack revealed that the archived chat logs are not end-to-end encrypted between the modified version of Signal offered by TeleMessage and the ultimate storage location, 404 Media reported. The messages of cabinet members and Waltz were reportedly not compromised.
Smarsh, Signal, U.S. Customs and Border Protection, Coinbase, and Scotiabank did not immediately return requests for comment.
