{"id":48014,"date":"2022-08-16T15:13:05","date_gmt":"2022-08-16T15:13:05","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/33736\/1-900-Signal-Users-Exposed-Twilio-Attacker-Explicitly-Looked-For-Certain-Numbers.html"},"modified":"2022-08-16T15:13:05","modified_gmt":"2022-08-16T15:13:05","slug":"1900-signal-users-exposed-twilio-attacker-explicitly-looked-for-certain-numbers","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/1900-signal-users-exposed-twilio-attacker-explicitly-looked-for-certain-numbers\/","title":{"rendered":"1,900 Signal Users Exposed: Twilio Attacker Explicitly Looked For Certain Numbers"},"content":{"rendered":"

The security breach at Twilio earlier this month affected at least one high-value customer, Signal, and led to the exposure of the phone number and SMS registration codes for 1,900 users of the encrypted messaging service, it confirmed.<\/p>\n

However, Signal \u2013 considered one of the better secured of all the encrypted messaging apps \u2013 claims the attacker would not have been able to access the message history, contact lists, profile information, or other personal data associated with these user accounts. The non-profit organization said in a security note<\/a> on its site that it has identified and is notifying the 1,900 users directly, and prompting them to re-register Signal on their devices.<\/p>\n

The company had already come under fire for its practice of SMS verification in the past, something which has rebounded in the wake of the disclosure.<\/p>\n