logo

iPhone forensics expose Signal messages after app removal in U.S. case

ID: c255e399-aa86-5303-b660-4a4ab886e23a

STIX ID: report--c255e399-aa86-5303-b660-4a4ab886e23a

Feed Name: Security Affairs

Threat Score
0/100

Date Published: 2026-04-13

Date Updated: 2026-04-22

Author: Pierluigi Paganini

...
...

A Texas court case revealed that the FBI recovered incoming Signal message content from an iPhone even after the Signal app was uninstalled by extracting system-level notification artifacts that iOS retains; this did not involve breaking Signal encryption but leveraged Apple’s notification storage and standard forensic acquisition methods, highlighting that disappearing messages and app deletion do not guarantee complete removal of message remnants.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.