Encrypted messaging service Signal said the phone numbers of 1,900 users could have been revealed in a phishing attack on Twilio Inc, its verification services provider, earlier this month.
The attacker could also have accessed the SMS verification code used to register with Signal, but message history, profile information and contact lists were not revealed, the company said in a blog post on Monday.
“An attacker could have attempted to re-register number to another device or learned that their number was registered to Signal,” it said.
Twilio, which disclosed the attack earlier this month, said it has been working together with Signal to help their investigation.
The San Francisco, California-based company counts over 256,000 businesses, including Ford Motor Co, Mercado Libre Inc and HSBC, among its customers.
(Reporting by Tiyashi Datta in Bengaluru; Editing by Aditya Soni)
Financial Post Top Stories
Sign up to receive the daily top stories from the Financial Post, a division of Postmedia Network Inc.
By clicking on the sign up button you consent to receive the above newsletter from Postmedia Network Inc. You may unsubscribe any time by clicking on the unsubscribe link at the bottom of our emails. Postmedia Network Inc. | 365 Bloor Street East, Toronto, Ontario, M4W 3L4 | 416-383-2300