A Third Party Breached The Intercept’s Signal Tip Line and Has Been

There isn’t much information about the breach or how it was discovered, but the article says this. > Signal user IDs associated with accounts that are left dormant are eventually recycled and made available to new users. If you own a Signal account that you leave dormant from time to time, beware of this. The Signal team need to fix this. I don’t claim to propose the best solution, but letting other users take over usernames of a dormant account is a mistake, and perhaps users who connect with someone using a potentially hijacked username ought to be alerted to verify the contact.