Messaging platform Signal, known for its end-to-end encryption policy, said phone numbers of 1,900 users might have been revealed in a phishing attack on Twilio Inc, its SMS verification services provider, earlier this month.
“Attackers may have accessed phone numbers and SMS registration codes for 1,900 Signal users via Twilio,” the company said on Twitter. Signal, on the other hand, stated that the messaging history, profile information, contact lists, and other data were not and could not be accessed. “The information attackers obtained could enable them to attempt to register a Signal user’s phone number on a new device if that user had not enabled registration lock,” the company claimed in a series of tweets on Monday.
