Signal has issued a warning that phishing scams have compromised accounts of government officials and journalists globally, according to an announcement made on Monday, March 9, 2026.
The encrypted messaging platform stated it is aware of targeted phishing attacks resulting in account takeovers for some Signal users. Signal emphasized these incidents were the result of sophisticated social engineering tactics rather than any compromise of its encryption or infrastructure.
“We are aware of recent reports regarding targeted phishing attacks that have resulted in account takeovers of some Signal users, including government officials and journalists. We take this very seriously,” Signal said in a statement. The company noted, “To be clear: Signal’s encryption and infrastructure have not been compromised and remain robust. These attacks were executed via sophisticated phishing campaigns, designed to trick users into sharing information – SMS codes and/or Signal PINs.”
Signal also highlighted that its support team would never contact users to request verification codes or PINs. The app actively reminds users to keep these details private.
A similar incident occurred in April 2025 when former national security official Mike Waltz mistakenly added journalist Jeffrey Goldberg to a Signal group chat discussing U.S. military operations in Yemen due to an iPhone feature that prompts contact updates automatically.