Signal
Submitted
Apr 24, 2026, 14:24 UTC
Since February 2026, a phishing cyberattack targeting Signal messaging accounts has compromised German parliament members and other key sectors, prompting a federal espionage investigation with Russia suspected as the prime actor.
A cyberattack starting in February 2026 has targeted Signal messaging app users within the German Bundestag parliament, military, diplomatic, media, and journalistic sectors. The attack employed phishing to compromise accounts, including that of Julia Klöckner, president of the Bundestag. Konstantin von Notz, a Green party member and security expert, described the scale as 'extremely worrying' and said the integrity of parliamentary communications cannot currently be guaranteed. The Federal Prosecutor's Office is investigating for espionage, with Russia named as the main suspect amidst ongoing tensions due to Berlin's military aid to Ukraine and Moscow's alleged cyber campaign against Germany. The government under Chancellor Friedrich Merz has provided limited information but confirmed the attacks are ongoing and probably state-sponsored. Opposition parties SPD and Die Linke have acknowledged some of their members were affected. Von Notz called for increased public awareness and rigorous investigation by intelligence and law enforcement agencies.
Confidence: High
The article provides clear evidence of a state-sponsored phishing cyberattack targeting German parliament members and other sectors, with Russia suspected as the aggressor and a federal espionage investigation ongoing.
Source URL
https://lefigaro.fr/international/allemagne-l-ampleur-du-piratage-de-signal-au-sein-du-parlement-est-extremement-preoccupante-20260424
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "e85b4a48-1102-4db6-9a3b-7b98e27f51c3",
"url": "https://lefigaro.fr/international/allemagne-l-ampleur-du-piratage-de-signal-au-sein-du-parlement-est-extremement-preoccupante-20260424",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Cyber Attacks",
"incident_type": "Hacking, malware, ransomware",
"country": "Germany",
"source_reliability": "C",
"info_credibility": "3",
"tags": [
"Signal",
"phishing",
"cyberattacks",
"espionage",
"Germany",
"Russian cyber operations",
"Bundestag",
"Julia Klöckner",
"Konstantin von Notz",
"Federal Prosecutor",
"Intelligence",
"political targets"
],
"nodes": [],
"countries": [
"Germany"
],
"where_text": "Cyberspace",
"headline": "Germany: The scale of Signal hacking within parliament is 'extremely worrying'",
"description": "Since February 2026, German federal authorities have been investigating a phishing cyberattack compromising Signal messaging accounts of Bundestag members, journalists, military, and diplomatic personnel. The breach raises serious doubts about the integrity of parliament communications. Julia Klöckner, Bundestag president from Chancellor Merz's conservative party, was among victims. Konstantin von Notz, Green party Bundestag member and security specialist, called the scale of the hack 'extremely worrying' and urged rapid identification of affected individuals and data exposed. The attack is ongoing and likely state-sponsored, with Russia suspected as the prime actor due to Germany’s support for Ukraine and prior cyber conflicts. The federal Interior Ministry confirmed the attack targets politicians, military, diplomats, and investigative journalists, with official warnings issued on 6 February and 17 April. Opposition parties admitted some members were hit but details remain sparse as the government maintains a cautious public stance. Von Notz demanded increased public awareness and thorough investigations by intelligence and police.",
"summary_short": "Since February 2026, a phishing cyberattack targeting Signal messaging accounts has compromised German parliament members and other key sectors, prompting a federal espionage investigation with Russia suspected as the prime actor.",
"summary_extended": "A cyberattack starting in February 2026 has targeted Signal messaging app users within the German Bundestag parliament, military, diplomatic, media, and journalistic sectors. The attack employed phishing to compromise accounts, including that of Julia Klöckner, president of the Bundestag. Konstantin von Notz, a Green party member and security expert, described the scale as 'extremely worrying' and said the integrity of parliamentary communications cannot currently be guaranteed. The Federal Prosecutor's Office is investigating for espionage, with Russia named as the main suspect amidst ongoing tensions due to Berlin's military aid to Ukraine and Moscow's alleged cyber campaign against Germany. The government under Chancellor Friedrich Merz has provided limited information but confirmed the attacks are ongoing and probably state-sponsored. Opposition parties SPD and Die Linke have acknowledged some of their members were affected. Von Notz called for increased public awareness and rigorous investigation by intelligence and law enforcement agencies.",
"actor_primary": null,
"target_primary": null,
"location_text": "Berlin",
"location_region": "Berlin",
"location_coordinates_lat": 52.52,
"location_coordinates_lon": 13.405,
"location_precision": "Approximate",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article provides clear evidence of a state-sponsored phishing cyberattack targeting German parliament members and other sectors, with Russia suspected as the aggressor and a federal espionage investigation ongoing.",
"event_time_utc": "2026-02-01T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-04-24T14:24:00.423Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "approximate",
"time_precision_band": "within_24h",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "independent_sources"
}Source reliability
C
Info credibility
3
Event time
Feb 1, 2026, 00:00 UTC
Event time confidence
pm24h
Location
Berlin
Region
Berlin
Country
Germany
Countries
Germany
Tags
Signal, phishing, cyberattacks, espionage, Germany, Russian cyber operations, Bundestag, Julia Klöckner, Konstantin von Notz, Federal Prosecutor, Intelligence, political targets
Signal
Submitted
Apr 24, 2026, 14:24 UTC
Since February 2026, a phishing cyberattack targeting Signal messaging accounts has compromised German parliament members and other key sectors, prompting a federal espionage investigation with Russia suspected as the prime actor.
A cyberattack starting in February 2026 has targeted Signal messaging app users within the German Bundestag parliament, military, diplomatic, media, and journalistic sectors. The attack employed phishing to compromise accounts, including that of Julia Klöckner, president of the Bundestag. Konstantin von Notz, a Green party member and security expert, described the scale as 'extremely worrying' and said the integrity of parliamentary communications cannot currently be guaranteed. The Federal Prosecutor's Office is investigating for espionage, with Russia named as the main suspect amidst ongoing tensions due to Berlin's military aid to Ukraine and Moscow's alleged cyber campaign against Germany. The government under Chancellor Friedrich Merz has provided limited information but confirmed the attacks are ongoing and probably state-sponsored. Opposition parties SPD and Die Linke have acknowledged some of their members were affected. Von Notz called for increased public awareness and rigorous investigation by intelligence and law enforcement agencies.
Confidence: High
The article provides clear evidence of a state-sponsored phishing cyberattack targeting German parliament members and other sectors, with Russia suspected as the aggressor and a federal espionage investigation ongoing.
Source URL
https://lefigaro.fr/international/allemagne-l-ampleur-du-piratage-de-signal-au-sein-du-parlement-est-extremement-preoccupante-20260424
Published as a hybrid-warfare signal with a public source and reviewer-approved assessment bands. See the methodology for how records are assessed.
{
"id": "e85b4a48-1102-4db6-9a3b-7b98e27f51c3",
"url": "https://lefigaro.fr/international/allemagne-l-ampleur-du-piratage-de-signal-au-sein-du-parlement-est-extremement-preoccupante-20260424",
"source": "extension",
"status": "approved",
"category": "Cyber & Information Warfare",
"subcategory": "Cyber Attacks",
"incident_type": "Hacking, malware, ransomware",
"country": "Germany",
"source_reliability": "C",
"info_credibility": "3",
"tags": [
"Signal",
"phishing",
"cyberattacks",
"espionage",
"Germany",
"Russian cyber operations",
"Bundestag",
"Julia Klöckner",
"Konstantin von Notz",
"Federal Prosecutor",
"Intelligence",
"political targets"
],
"nodes": [],
"countries": [
"Germany"
],
"where_text": "Cyberspace",
"headline": "Germany: The scale of Signal hacking within parliament is 'extremely worrying'",
"description": "Since February 2026, German federal authorities have been investigating a phishing cyberattack compromising Signal messaging accounts of Bundestag members, journalists, military, and diplomatic personnel. The breach raises serious doubts about the integrity of parliament communications. Julia Klöckner, Bundestag president from Chancellor Merz's conservative party, was among victims. Konstantin von Notz, Green party Bundestag member and security specialist, called the scale of the hack 'extremely worrying' and urged rapid identification of affected individuals and data exposed. The attack is ongoing and likely state-sponsored, with Russia suspected as the prime actor due to Germany’s support for Ukraine and prior cyber conflicts. The federal Interior Ministry confirmed the attack targets politicians, military, diplomats, and investigative journalists, with official warnings issued on 6 February and 17 April. Opposition parties admitted some members were hit but details remain sparse as the government maintains a cautious public stance. Von Notz demanded increased public awareness and thorough investigations by intelligence and police.",
"summary_short": "Since February 2026, a phishing cyberattack targeting Signal messaging accounts has compromised German parliament members and other key sectors, prompting a federal espionage investigation with Russia suspected as the prime actor.",
"summary_extended": "A cyberattack starting in February 2026 has targeted Signal messaging app users within the German Bundestag parliament, military, diplomatic, media, and journalistic sectors. The attack employed phishing to compromise accounts, including that of Julia Klöckner, president of the Bundestag. Konstantin von Notz, a Green party member and security expert, described the scale as 'extremely worrying' and said the integrity of parliamentary communications cannot currently be guaranteed. The Federal Prosecutor's Office is investigating for espionage, with Russia named as the main suspect amidst ongoing tensions due to Berlin's military aid to Ukraine and Moscow's alleged cyber campaign against Germany. The government under Chancellor Friedrich Merz has provided limited information but confirmed the attacks are ongoing and probably state-sponsored. Opposition parties SPD and Die Linke have acknowledged some of their members were affected. Von Notz called for increased public awareness and rigorous investigation by intelligence and law enforcement agencies.",
"actor_primary": null,
"target_primary": null,
"location_text": "Berlin",
"location_region": "Berlin",
"location_coordinates_lat": 52.52,
"location_coordinates_lon": 13.405,
"location_precision": "Approximate",
"is_aggressor_signal": true,
"signal_type": "HYBRID_SIGNAL",
"is_hybrid_war_signal": true,
"classification_complete": true,
"hybrid_signal_complete": true,
"classification_confidence": "High",
"classification_rationale": "The article provides clear evidence of a state-sponsored phishing cyberattack targeting German parliament members and other sectors, with Russia suspected as the aggressor and a federal espionage investigation ongoing.",
"event_time_utc": "2026-02-01T00:00:00.000Z",
"end_time_utc": null,
"event_time_confidence": "pm24h",
"created_at": "2026-04-24T14:24:00.423Z",
"updated_at": "2026-11-04T08:35:32.139Z",
"reliability_band": "strong",
"location_precision_band": "approximate",
"time_precision_band": "within_24h",
"severity_band": "significant",
"attribution_confidence_band": "high",
"attribution_basis": "independent_sources"
}Source reliability
C
Info credibility
3
Event time
Feb 1, 2026, 00:00 UTC
Event time confidence
pm24h
Location
Berlin
Region
Berlin
Country
Germany
Countries
Germany
Tags
Signal, phishing, cyberattacks, espionage, Germany, Russian cyber operations, Bundestag, Julia Klöckner, Konstantin von Notz, Federal Prosecutor, Intelligence, political targets