A woman holds a smartphone displaying the Signal messaging app logo, which is also seen near her, in this illustration taken January 13, 2021. Photo: Reuters
Signal an encrypted messaging service says the phone numbers of 1,900 users could have been revealed in a phishing attack on Twilio Inc, its verification services provider, earlier this month.
According to Reuters, the attacker could also have accessed the SMS verification code used to register with Signal, but message history, profile information and contact lists were not revealed, the company said in a blog post on Monday.
“An attacker could have attempted to re-register number to another device or learned that their number was registered to Signal,” it said.
Twilio, which had disclosed the attack earlier this month, was not immediately available for comment.
The San Francisco, California-based company counts over 256,000 businesses including Ford Motor Co, Mercado Libre Inc and HSBC among its customers.
Writing by Muzha Kucha