The reported breach involved TeleMessage, a separate message-archiving service—not a demonstrated break of Signal’s own protocol or cryptography. TeleMessage offered modified versions of messaging apps that captured messages for archiving. Reports in May 2025 said a hacker exploited a TeleMessage vulnerability; the complete number of affected users and records has not been independently established in the sources cited here.
Was Signal hacked?
Available reports describe a breach of TeleMessage’s service and archive environment. They do not show that Signal itself, or the cryptography used by the official Signal app, was broken. The distinction matters: TeleMessage’s modified messaging clients included an archiving function, creating a separate system in which message content could be captured and retained.
Signal’s spokesperson told Reuters: “We cannot guarantee the privacy or security properties of unofficial versions of Signal.” (Reuters-syndicated report carried by BleepingComputer, May 5, 2025.) Using an unofficial client therefore involves trusting not only the original messaging platform but also the modified app and the service that stores its archives.
What was TeleMessage, and why did archiving matter?
Bloomberg described TeleMessage as a message-archiving app that let users archive messages from Signal, WhatsApp and Telegram. The report said it was owned by Smarsh. (Bloomberg, May 5, 2025.) Reuters reported that the product captured messages after decryption so they could be preserved and stored. (Reuters, May 4, 2025.)
#1 Best Overall
- Comprehensive Privacy Protection: Phone Camera Privacy Sticker offers unbeatable privacy for your devices, keeping sensitive moments safe
- Strong and Reliable: Camera Cover Label is engineered with high strength adhesive, making it a lasting privacy camera cover that resists peeling, moisture, and environmental changes
- Ultra Slim Construction: The front camera sticker for phone fits front and rear cameras without bulk, preserving your phone’s slim profile and maintaining clear access when removed
- Effortless Installation: Stickers for camera are self adhesive and easy to apply, removing quickly without damaging your device, making privacy management convenient for daily routines
- Multipurpose Design: No Photography Sticker and Security camera label are ideal for workplaces, classrooms, and homes, offer immediate privacy and clear restriction messaging for various settings
That design creates a distinct security boundary. End-to-end encryption protects messages in transit between participants, but an archiving workflow that captures content after decryption must handle readable message data somewhere. If that archive or its controls are compromised, the exposure can occur outside the encrypted conversation itself.
For any messaging-and-retention system, the important questions are where messages are decrypted, what the archive stores, who controls keys and administrator access, how authentication and server-side controls are enforced, what retention and audit rules apply, and what independent security assessment or authorization covers the deployed product. The reports cited here do not provide enough information to score TeleMessage against alternative systems on those measures.
Rank #2
- PRECISION-FIT FOR TESLA DISPLAYS: Engineered for Tesla Model 3, Y, S, X, & Juniper screens. The EV Pivot Base ensures seamless, vibration-free integration to keep your navigation at eye level.
- INNOVATIVE ONECLICK SECURITY: Most intuitive mounting tech available. Push your phone against the front trigger and arms click shut instantly for true, secure one-handed operation.
- VERSATILE 4-IN-1 MOUNTING: Complete flexibility. Mount on your Tesla display, windshield, dashboard, or air vent. Includes all hardware for four distinct configurations in one kit.
- ADVANCED TEMPERBOND SUCTION: High-performance gel creates a rock-solid vacuum seal. Maintains superior grip even in extreme cabin temperatures, keeping your device stable on any road.
- ULTRA-STABLE VENT HOOK MOUNT: Specialized vent hook provides a mechanical lock to slats. Includes integrated cable holders to keep cords organized during rapid acceleration or sharp turns.
What was reportedly accessed?
Reuters reported that 404 Media said a hacker exploited a TeleMessage vulnerability. The May 6, 2025 letter from the U.S. Senate Committee on Finance recounted reports of access to customer communications and other data, and said the company suspended services after a subsequent hack. The letter is a congressional account of reported events, not a completed forensic report. (U.S. Senate Committee on Finance letter, May 6, 2025.)
Those accounts do not establish a final, independently verified list of affected users, a complete count of records accessed, or the total number of agencies involved. It would be misleading to treat any such overall scope as settled based on these reports.
Recommended Free Tools
Did government agencies stop using TeleMessage?
WIRED reported that U.S. Customs and Border Protection confirmed it had used TeleMessage and disabled it after the breach reports. That establishes the agency’s reported response at that time, not whether the same position or the service’s status continued later. (WIRED, May 2025.)
The Senate letter also said Smarsh suspended services following a subsequent hack. The available sources do not establish TeleMessage’s current operating status or final remediation.
Rank #4
- 🎛 [FOUR INTERFACES] BoxWave Smart Gadget Compatible With redbeat E3 Smartphone (6.6 in). BoxWave's AllReader SD Card Reader is one of the most VERSATILE SD and microSD card readers for your device! Comes with four interfaces including USB-C, USB-A and Micro-USB for easy access. ⭐ *** PLEASE NOTE, E3 SMARTPHONE (6.6 IN) DEVICE NOT INCLUDED ***
- 🔄 [EASY FILE TRANSFER] Finally, an easy way to transfer files between devices! Save all of your photos onto your desktop quickly, or upload some music into your smartphone. Now it's all possible with the AllReader SD Card Reader! Just PLUG N PLAY with the built-in connectors to copy files to and from all of your devices.
- ✌ [EASY TO USE] Simply plug in a SD card or microSD card, and attach it to your device; The AllReader SD Card Reader will detect your card for QUICK ACCESS to photos, music, videos, and other files!
- 📦 [UNLIMITED STORAGE] Simply plug in a SD card or microSD card, and attach it to your device; The AllReader SD Card Reader will detect your card for QUICK ACCESS to photos, music, videos, and other files!
- 🤲 [COMPACT DESIGN] Advanced design packs in all of the electronics into a tiny package that has built in connectors. Easily pack it in your bag, purse, or pocket and take it with you EVERYWHERE!
What the incident does—and does not—establish
The reported incident highlights the risk of treating a modified messaging app and its retention backend as if they automatically inherit the security properties of the original app. A service that archives decrypted messages creates another place where sensitive content and related data may be exposed.
At the same time, the reports cited here do not establish that Signal’s protocol was compromised, nor do they provide a definitive forensic accounting of TeleMessage’s breach. The supported conclusion is narrower: TeleMessage’s separate archive-enabled service was reported breached, and the full scope remained unresolved in the cited accounts.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
