Published on 2025-05-19
Thousands of heap dumps taken May 4, 2025 from TeleMessage, which produces software used to archive encrypted messaging apps such as Signal and WhatsApp. The service came to public notice in 2025 when it was reported that former national security adviser Mike Waltz used TeleMessage while communicating with members of the Trump administration, including Vice President JD Vance and Director of National Intelligence Tulsi Gabbard. TeleMessage has been used by the federal government since at least February 2023.
Some of the archived data includes plaintext messages while other portions only include metadata, including sender and recipient information, timestamps, and group names. To facilitate research, Distributed Denial of Secrets has extracted the text from the original heap dumps.
404 Media reported that they were unaware of the identity of their source, with NBC News later reporting that a second hacker had breached TeleMessage's servers. Reporting by Wired and Unicorn Riot indicate that the breaches were due to a misconfiguration in server settings and poor programming choices.
Due to PII in the dataset and the inclusion of groups and messages unrelated to government or corporate behavior, the data is currently only being offered to journalists and researchers. Request access
Research
-
Photo appears to show Mike Waltz using Signal-like app that can archive messages (NBC News) Archive link
-
TeleMessage breached by multiple hackers (Kevin Collier on Bluesky) Archive link
-
How the Signal knockoff app TeleMessage got hacked in 20 minutes (Wired) Archive link
-
Messaging app seen in use by Mike Waltz suspends service after hackers claim breach (NBC News) Archive link
-
CISA adds the notorious TeleMessage flaw to KEV list (CSO Online) Archive link
-
SignalGate meets WordPress: Outgoing National Security Adviser’s phone dumps messages via Israeli app (Unicorn Riot) Archive link
-
On the day he was fired as National Security Advisor, Mike Waltz used an Israeli app to archive Signal messages (Drop Site News) Archive link
-
The Signal clone the Trump admin uses was hacked (404 Media) Archive link
-
Smarsh completes acquisition of TeleMessage, extends communications compliance leadership (Smarsh press release) Archive link
-
TeleMessage (Wikipedia) Archive link
Related Articles
Corporate
Amazon Atlas
Published by Bonaventure on 2024-07-12 12:05
Released 11 October 2018, Amazon Atlas is a "Highly Confidential" 2015 internal document from hosting and cloud services provider Amazon giving locations and operational details of more than 100...
GiveSendGo
Published by artvandelay on 2024-01-17 23:08
Donor information for every campaign on the 'Christian fundraising platform' GiveSendGo, best known for being used by far-right extremists like the Proud Boys. The site has allegedly also been...
GiveSendGo 2.0
Published by artvandelay on 2024-01-17 23:14
Over 1,000 files consisting of identification cards (including driver's licenses, passports, military IDs, visas, birth certificates, insurance cards and more) uploaded onto GiveSendGo's publicly...
United States
NSA Targets World Leaders
Published by Bonaventure on 2024-07-10 02:33
Released 23 February 2016, NSA targets world leaders is a series of some of the most highly classified documents ever made public by a media organization, revealing National Security Agency data...
Trade in Services Agreement
Published by Bonaventure on 2024-07-10 02:45
A series of eight releases dating from June 2015 to October 2016 about the Trade in Services Agreement between the United States, the European Union and 22 other nations. Services account for more...
Transatlantic Trade and Investment Partnership
Published by Bonaventure on 2024-07-10 15:31
Released 9 May 2016, Transatlantic Trade and Investment Partnership is a draft version of a secret planned comprehensive agreement between the United States and the European Union intended to...
Israel
Israel Defense Forces (Ganosec)
Published by mx_yzptlk on 2024-07-15 05:55
Over 2,250 intelligence files about IDF personnel, much stamped Ezzedeen Al-Qassam Brigades. The data appears to have been confiscated from Al-Qassam Brigades. The data was published by Ganosec...
Epsilor
Published by Bonaventure on 2024-06-23 00:55
Over 33,000 files from Epsilor, a corporation which specializes in batteries, power networks and charges for military and defense contractors. The data has been previously released and has been...
mSpy
Published by Bonaventure on 2024-06-23 00:37
A complete copy of the help desk data from Brainstack_, the company responsible for the spyware software mSpy. mSpy is used by individuals, corporations and governments to target their rivals,...
Distributed Denial of Secrets is a 501(c)(3) non-profit. Support our mission!
Follow us on BlueSky, Mastodon and Telegram.
Forked from 📰 Frontpage, a free and open-source product by Science & Design, Inc.