Source: https://www.dropsitenews.com/p/intercept-signal-tip-line-breach-hack
Publisher: Drop Site News (Murtaza Hussain, Ryan Grim)
Date Published: July 2, 2026
Relevant To: Signal tip-line security vulnerability (dormant ID recycling); whistleblower source protection failure case study
Verification Status: Verified
Notes: Confirmed via full-text fetch. The Intercept’s confidential Signal whistleblower tip line was seized by an unknown third party, who has been actively soliciting sources since at least February 2026 while impersonating the outlet (via a fraudulent X/Twitter account posing as “Investigative Intake” for The Intercept, ~100 posts Feb-May, opened from a Hong Kong-listed location via VPN). The Intercept quietly switched to a new Signal username on June 30 with a generic “security best practices” social media post, but did NOT inform prior or prospective sources that their identity/information may have been compromised, nor explain how the breach happened or how long it persisted. Drop Site’s own outreach to the impersonating X account received a reply actively soliciting tips as of July 1-2, 2026. Technical mechanism per Drop Site’s reporting: Signal recycles dormant user IDs, meaning the tip line’s ID likely went dormant and was reassigned to a new account-holder despite remaining listed as official on The Intercept’s website — a real, exploitable vulnerability for ANY organization running a Signal-based tip line, including BPA’s own encrypted-communications guidance. The Intercept’s legal counsel claims “no information that any source was compromised” but did not answer direct questions about the breach’s discovery or duration. HIGH RELEVANCE for BPA’s digital security/OpSec guidance: this is a concrete, recent, well-documented cautionary tale about Signal tip-line ID recycling risk — worth incorporating into any BPA guidance about setting up or maintaining secure tip lines (e.g., recommend periodic manual verification that a listed Signal username still resolves to the expected account/safety number).