Security News > 2022 > August > Signal Phone Numbers Exposed in Twilio Hack

Signal Phone Numbers Exposed in Twilio Hack
2022-08-23 11:30

All users can rest assured that their message history, contact lists, profile information, whom they'd blocked, and other personal data remain private and secure and were not affected.

For about 1,900 users, an attacker could have attempted to re-register their number to another device or learned that their number was registered to Signal.

1,900 users is a very small percentage of Signal's total users, meaning that most were not affected.

We are notifying these 1,900 users directly, and prompting them to re-register Signal on their devices.

If you were not notified, don't worry about it.

It does bring up the old question: Why does Signal require a phone number to use? It doesn't have to be that way.


News URL

https://www.schneier.com/blog/archives/2022/08/signal-phone-numbers-exposed-in-twilio-hack.html

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Signal 3 1 7 5 1 14