Overview
- Signal said Tuesday it will roll out changes in the coming weeks to make account takeovers harder and stressed its servers and encryption were not hacked.
- Security circles in Berlin estimate about 300 victims, with accounts of Bundestag President Julia Klöckner and ministers Karin Prien and Verena Hubertz among those compromised and some parliamentary groups likely read.
- Attackers posed as “Signal Support” to trick targets into sharing verification codes or PINs, then took over accounts and often switched the linked phone number to lock users out.
- Bundestagspräsidentin Julia Klöckner advised MPs to use Wire Bund, the BSI‑cleared messenger with email sign‑in and government‑hosted servers, as some leaders also float restricting Signal on work devices.
- BfV and BSI first warned government bodies on February 6 after months of activity traced back to 2025, while Dutch services and German security circles suspect a Russian operation and prosecutors continue investigations.