1,900 phone numbers of Signal users accessed in phishing attack

Messaging platform Signal – known for its end-to-end encryption policy – said phone numbers of 1,900 users might have been revealed in a phishing attack on Twilio Inc, its SMS verification services provider, earlier this month.

“Via Twilio, attackers may have accessed phone numbers & SMS registration codes for 1,900 Signal users,” it said on Twitter.

However, Signal said the messaging history, profile information, contact lists, and other data were not and could not be accessed.