![Task manager wont open](https://cdn1.cdnme.se/5447227/9-3/screenshot_8_64e62948e087c31b4a9aa5ed.jpg)
![signalwire twilio signalwire twilio](https://s3-us-east-2.amazonaws.com/signalwire-corpweb/images/blog/signalwirecasestudy.png)
Message history is stored only on your device and Signal does not keep a copy of it. Importantly, this did not give the attacker access to any message history, profile information, or contact lists. Among the 1,900 phone numbers, the attacker explicitly searched for three numbers, and we’ve received a report from one of those three users that their account was re-registered.The attacker no longer has this access, and the attack has been shut down by Twilio. During the window when an attacker had access to Twilio’s customer support systems it was possible for them to attempt to register the phone numbers they accessed to another device using the SMS verification code.
![signalwire twilio signalwire twilio](http://www.mrgeek.me/wp-content/uploads/2013/01/Getting-Started-with-Twilio-SMS-Part-1-Feature-Image.jpg)
For approximately 1,900 users, either 1) their phone numbers were potentially revealed as being registered to a Signal account, or 2) the SMS verification code used to register with Signal was revealed. An attacker gained access to Twilio’s customer support console via phishing.
![signalwire twilio signalwire twilio](https://www.docusign.com/sites/d8/files/styles/body_max_width/public/blog/migrated/com/2019/08/ide.png)
We conducted an investigation into the incident and determined the following. Twilio, the company that provides Signal with phone number verification services, notified us that they had suffered a phishing attack. We created this feature to protect users against threats like the Twilio attack. To best protect your account, we strongly recommend that you enable registration lock in the app’s Settings.Open Signal on your phone and register your Signal account again if the app prompts you to do so.If you received an SMS message from Signal with a link to this support article, please follow these steps: We notified these 1,900 users directly, and prompted them to re-register Signal on their devices.
![signalwire twilio signalwire twilio](https://thedarkside.frantzmiccoli.com/res/twilio-6.png)
1,900 users is a very small percentage of Signal’s total users, meaning that most were not affected. This attack has since been shut down by Twilio.
![Task manager wont open](https://cdn1.cdnme.se/5447227/9-3/screenshot_8_64e62948e087c31b4a9aa5ed.jpg)