Signal Breach - August 4, 2022

Signal is an app used as a messaging platform for Android, Windows, and Apple products, among others. The app was created by current CEO and United States cryptographer Moxie Marlinspike.

What Was the Breach?

The breach was a part of a larger attack that Signal, which is a messaging app has been illegally accessed by hackers. This attack was also connected to a much bigger one that happened with Twilio. and a few of its affiliates. In the Twilio hack, the actors gained access to Signal for a limited time, and once detected, it was immediately shut down.

How Did the Breach Occur?

The breach was a part of the Twilio hack, which accessed only 125 accounts. The main problem is this; when the attackers went through Twilio, they pulled up three very specific phone numbers. Many speculate if this has something to do with the Signal hack or if it could lead to far worse repercussions.

When Did This Breach Occur?

This breach occurred on August 4th, 2022.

Who Does the Breach Impact?

For around 1,900 users, the attacker may have tried to re-register their number to a different device or learned that the customer’s number was registered to Signal. “This attack has since been shut down by Twilio. 1,900 users is a very small percentage of Signal’s total users, meaning that most were not affected,” was written as a statement on the Signal website.

How Many Files Does the Breach Affect?

“All users can rest assured that their message history, contact lists, profile information, whom they'd blocked, and other personal data remain private and secure and were not affected,”

Signal put on their website. Read more at 1900 Signal Users Notified of Information Breach.