logo

FBI Extracts Deleted Signal Messages from iPhone Notification Database

ID: 796c0dd4-a095-5613-94ad-04c5ee00c7cf

STIX ID: report--796c0dd4-a095-5613-94ad-04c5ee00c7cf

Feed Name: Schneier on Security

Threat Score
35/100

Date Published: 2026-04-23

Date Updated: 2026-05-13

Author: Bruce Schneier

...
...

The FBI was able to extract copies of incoming Signal messages from an iPhone's push notification database even after the app was deleted because message previews were stored in the device notification database. The article notes this depends on Signal and iPhone notification/preview settings, required physical forensic access and specialized tools, and that Apple has released a patch.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.