Messaging app used by Trump adviser Mike Waltz reportedly hacked
US National Security Advisor Mike Waltz walks to board Marine One at the White House in Washington, D.C., US, April 3, 2025. PHOTO: REUTERS
A messaging app reportedly used by former US National Security Adviser Mike Waltz has been hacked, according to a report by tech outlet 404 Media, raising fresh concerns over the security of communications within the Trump administration.
The app, TeleMessage—branded as a secure, Signal-like platform—was allegedly compromised through a backend vulnerability, enabling a hacker to intercept user messages.
While 404 Media said no messages from Waltz or other Trump officials were accessed, the incident underscores ongoing risks posed by unofficial communication tools in government settings.
Waltz’s use of TeleMessage surfaced after his ouster last week, which followed controversy over his creation of a Signal group to discuss real-time US military operations in Yemen.
The scandal deepened after a prominent journalist was mistakenly added to the chat, exposing lapses in operational security.
TeleMessage, owned by Portland-based Smarsh and now being rebranded as Capture Mobile, offers decrypted message capture for compliance with federal retention rules.
However, experts warn that such features, if poorly secured, can introduce vulnerabilities not present in fully end-to-end encrypted apps like Signal.
The hacker, who remained anonymous, reportedly provided 404 Media with intercepted data, some of which was independently verified.
TeleMessage, Smarsh, Waltz, and the White House did not immediately respond to requests for comment. Reuters was unable to independently verify the hack.
The incident echoes past breaches involving apps like Confide and WhatsApp, highlighting how user errors and insecure platforms continue to undermine digital security in high-stakes government environments.
Despite strong encryption claims, experts stress that secure technology must be paired with proper training and protocol compliance to ensure data protection.