Mike Waltz and phim 18 xemSignal leaks — name a more iconic duo.
Just weeks after accidentally inviting a journalist into a Signal group chat about a classified military op in Yemen, the (now former) National Security Advisor is caught in yet another encrypted messaging meltdown.
According to a report from 404 Media, a hacker accessed a government-used Signal clone developed by TeleMessage, an Israeli company that sells modified versions of encrypted messaging apps like Signal to government agencies. These versions are designed to retain message archives to comply with federal regulations on document retention.
You May Also Like
SEE ALSO: WhatsApp, Signal scam leads to Microsoft account hacks. How to spot it.
The hacker claimed to have exploited a vulnerability in the app and reportedly gained access within about 30 minutes. While messages from cabinet members and Waltz were notdirectly compromised, the breached data included message content, contact information of government personnel, backend login credentials, and additional sensitive material, according to 404 Media.
Waltz's use of Telemessage was reported by 404 Media on April 30 after Reuters photographed him using the app during a cabinet meeting. He was dismissed the following day. While reports indicate that the hack was not the sole reason for his departure, the combination of Signalgate and the Reuters photograph cast the security advisor in a bad light.
Related Stories
- 'SNL' Weekend Update tackles AI Pope Trump, Elon stepping away from DOGE
- Elon to reduce DOGE involvement after dismal Tesla earnings report
- Trump says he may delay TikTok ban once again
- Trump casts himself as pope in AI-generated image
Crucially, the hacking incident suggests the archived chat logs are not end-to-end encrypted, raising serious concerns about the security architecture of the government’s communication tools. The use of an unofficial, modded version of Signal already represented a significant risk, one that now appears to have been realized.
A Signal spokesperson, speaking to 404 Media and other outlets, emphasized that the company "cannot guarantee the privacy or security properties of unofficial versions of Signal."