TeleMessage, an Israeli-developed messaging platform used to archive messages from modified versions of Signal, WhatsApp, Telegram, and WeChat for government and business users, has been hacked. The breach exposed archived messages and customer data from some users, including U.S. government agencies and financial institutions. The hack, first reported by 404 Media, was accomplished in 15-20 minutes after the attacker accessed TeleMessage's backend infrastructure using leaked credentials. Data related to U.S. Customs and Border Protection (CBP), cryptocurrency exchange Coinbase, and financial institutions such as Scotiabank were among the compromised material. The server compromised was hosted on Amazon AWS. Although the hacker did not obtain messages from cabinet members or former National Security Adviser Mike Waltz, who was seen using TeleMessage during a cabinet meeting with President Donald Trump, the breach included contact information for officials and chats labeled with Marco Rubio, Tulsi Gabbard, and JD Vance. The hack revealed that archived chat logs were not end-to-end encrypted between the app and the storage destination. A Signal spokesperson stated, "We cannot guarantee the privacy or security properties of unofficial versions of Signal." Waltz was ousted as national security adviser following a controversy in which a journalist was accidentally added to a Signal chat discussing U.S. military action in Yemen. In response to the breach, Smarsh, the parent company of TeleMessage, has suspended all TeleMessage services while investigating the incident and engaged an external cybersecurity firm. The Department of Homeland Security stated that CBP had immediately disabled TeleMessage on its devices as a precaution. The investigation into the full scope of the breach is ongoing.
Cierra TeleMessage, la aplicación que copia a Signal, tras un hackeo a cuentas del gobierno de Donald Trump https://t.co/bMsgwSk0Ib
🚨The Israeli company that provided a modified version of Signal to the Trump administration has been hacked🚨 TeleMessage’s backend systems were breached by an unidentified hacker who accessed the admin panel using leaked credentials. The attacker stole archived chats, https://t.co/7tG0Ru7DoW
Smarsh, which runs the TeleMessage app, says it is 'investigating a potential security incident' and suspending all its services 'out of an abundance of caution' https://t.co/jCwKU0y1tI