Skip to content
Russian Operatives Compromise US Congressman’s Signal Account

Russian Operatives Compromise US Congressman’s Signal Account

First seen 13 Jun 2026, 04:25 UTC

Article Content

Browse articles
ThreatCluster AI
ThreatCluster June 14, 2026 at 04:20 UTC
  • Congressman Don Bacon's Signal account was compromised by Russian-linked actors.
  • Attackers used social engineering tactics to gain access, posing as trusted contacts.
  • The FBI is investigating the breach amid rising foreign-backed digital campaigns.

Republican Representative Don Bacon of Nebraska disclosed that his Signal account was compromised by Russian-linked actors four to five months ago. The breach was achieved through social engineering tactics, where attackers posed as trusted acquaintances. Bacon, who chairs the House Armed Services Committee’s cyber subcommittee, emphasized the vulnerability of encrypted messaging apps like Signal. He does not store sensitive government information on the app and has maintained a cautious approach to device security for nearly two decades. The FBI and House IT specialists are currently investigating the incident, which reflects a broader trend of foreign-backed digital campaigns targeting US officials. Signal has acknowledged the issue and provided guidance to mitigate risks. The incident highlights the increasing sophistication of cyber operations intertwined with geopolitical tensions, particularly regarding Ukraine.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 101d ago How this analysis works

Timeline

2026-02-12
Signal account compromised
Don Bacon's Signal account was breached by Russian-linked operatives using social engineering tactics.
Dagens
2026-06-11
Bacon reveals breach at cybersecurity conference
During a conference, Bacon disclosed the breach and discussed the risks of using encrypted messaging apps.
United24Media
2026-06-12
FBI investigation initiated
The FBI and House IT specialists began investigating the breach following Bacon's disclosure.
Dagens

More articles in this cluster (2)

Following this threat?

Track Signal in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed