TeleMessage, a communications app reportedly used by former U.S. National Security Adviser Mike Waltz, has suspended operations following a suspected cybersecurity breach. The app’s parent company, Portland-based Smarsh, confirmed it was “investigating a potential security incident” and paused all services “out of an abundance of caution.”
The Department of Homeland Security (DHS) responded swiftly, stating that U.S. Customs and Border Protection officials had immediately disabled TeleMessage on government devices as a precaution. An investigation is underway to determine the scope of the breach.
Security concerns intensified after a Reuters image captured Waltz using TeleMessage—an unofficial version of the encrypted messaging app Signal—during an April 30 cabinet meeting at the White House. He was removed from his role the next day, amid controversy surrounding his creation of a Signal group used to coordinate U.S. military actions in Yemen. The group attracted scrutiny when a prominent journalist was mistakenly added to the chat.
Adding to the alarm, tech site 404 Media reported that a hacker had breached TeleMessage’s backend infrastructure, gaining access to user messages. The outlet claims to have independently verified some of the stolen material.
The breach raises serious national security concerns, particularly over the use of unofficial communication tools for sensitive government operations. Smarsh has not provided further details about the incident, but the suspension of TeleMessage services reflects heightened caution in the wake of the alleged hack.
As investigations continue, the incident underscores growing vulnerabilities in secure messaging platforms and the potential risks of using unofficial apps within government operations. Cybersecurity experts warn that such breaches can expose classified data and threaten national interests.
This developing story highlights the urgent need for tighter controls on government communication tools and stricter vetting of encrypted messaging apps.