Signal clone used by Waltz suspends service after ‘security incident’

The application that the Trump White House has been using to collect and securely store messages sent on popular commercial encrypted apps has temporarily suspended service in the wake of a security breach, the application’s owner said Monday.

The application, TeleMessage, is owned by Smarsh, a company based in Portland, Oregon, which provides tools for governments to comply with record-keeping regulations and laws. Last week, a Reuters photograph of Mike Waltz, then the national security adviser, showed that he was using the application to read Signal messages on his phone.

On Sunday, 404 Media reported that a hacker had breached the Israeli company that makes TeleMessage and stolen the contents of some direct messages and group chats sent using its Signal clone, as well as modified versions of WhatsApp, Telegram, and WeChat.

Smarsh declined to answer questions, but in a statement, a spokesperson said that it was investigating “a recent security incident” and that, “Out of an abundance of caution, all TeleMessage services have been temporarily suspended.”

The use of Signal by Trump administration officials came to light after Waltz created a chat on the platform to discuss strikes on Houthi militants in Yemen, but inadvertently added the editor-in-chief of The Atlantic to the group.

It is not clear when Waltz started using TeleMessage. A federal judge ordered the messages from the original Signal chat be preserved, but government lawyers later told a court in a different case that messages from the original Signal chat had been deleted from one participant’s phone, that of John Ratcliffe, the CIA director.

Security experts have raised concerns about the service, noting that installing such an application to archive encrypted messages creates numerous security vulnerabilities. WhatsApp and other messaging companies are actively attempting to ban TeleMessage.

© 2025 The New York Times Company