[German]In the article Twilio data security incident findings after SMS phishing attack, I had reported on the security incident at provider Twilio, where data was stolen by hackers through a phishing attack. Twilio offers programmable voice, text, chat, video and email APIs, and cloud authentication service Authy is also part of it. Now it has been revealed that messenger service Signal is one of Twilio's customers and has also been affected.
I came across this via the following tweet from Catalin Cimpanu. The messenger service Signal admits to being a victim of the Twilio hack.
Twilio offers Signal phone number verification services. After data was siphoned from Twilio, 1,900 Signal users are also likely to be affected by this incident. Signal plans to notify these 1,900 users directly and ask them to re-register Signal on their devices.
All Signal users can rest assured that their message history, contact lists, profile information, people they blocked, and other personal data remain private and secure and were not affected. Everything else that is important Signal has written together on this page.
