U.S. Officials’ Messages Exposed in TeleMessage Hack, Raising Cybersecurity Concerns

A recent cyberattack on TeleMessage, a government-used encrypted messaging platform, has exposed communications from over 60 U.S. officials, including disaster responders, diplomatic staff, a White House aide, and members of the Secret Service. The hack, initially linked to Trump national security adviser Mike Waltz, may have broader implications than previously reported.

Reuters reviewed leaked data provided by nonprofit Distributed Denial of Secrets. While much of the content appeared fragmentary, some messages discussed the travel plans of senior government figures, including trips to the Vatican and Jordan. Affected individuals were contacted by Reuters; few responded, and most referred inquiries to their respective agencies.

TeleMessage, which archives communications from apps like Signal for compliance with government policies, was suspended on May 5 following the breach. Its parent company, Smarsh, has not issued a statement. Federal contracting data confirms recent usage of the platform by the State Department, Department of Homeland Security, and CDC. A CDC spokesperson said it piloted TeleMessage in 2024 but found it unsuitable for its needs.

The U.S. cybersecurity agency CISA has urged federal users to stop using the platform unless guided otherwise by Smarsh. Though no sensitive information has been confirmed in the leak, cybersecurity experts warn the exposed metadata—such as participant identities and message timings—poses a significant counterintelligence risk.

Waltz previously sparked controversy for using Signal to discuss military operations, accidentally adding a journalist to a cabinet chat. While he was removed from his advisory role, Trump nominated him as U.N. ambassador.

As cybersecurity threats escalate, this breach underscores the urgent need for secure communication tools across U.S. agencies, especially ahead of the 2024 presidential election. The incident highlights the vulnerabilities of government-adopted apps and the potential impact of metadata exposure.