It costs $10,000 to $20,000 to get someone’s Signal chat content on the data black-market, depending on the target’s seniority, a European intelligence source said.
Andrew Rettman
Farewell then, Signal, go-to app for security-conscious EU diplomats, journalists, and activists: You’ve been compromised one too many times.
The Russians hacked it in Germany, a Reuters investigation said on Saturday. They also did it in the Netherlands, Dutch intelligence said on 9 March, while senior EU officials shut down a Signal group due to hacking fears in April, said Politico.
State-intrusion aside, it costs $10,000 (€8,500) to $20,000 to get someone’s Signal chat content on the data black-market, depending on the target’s seniority, a European intelligence source told EUobserver ($2,000 to $4,000 for WhatsApp).
For $200 to $400 a name you can buy people’s travel history, especially if they fly to corrupt bureaucracies, such as Russia or Turkey, where personal data is leaked en masse, said a contact from a private-intelligence firm.
EUobserver saw Russian diplomats’ medical records, banking and tax data, traffic violations, and dating website usernames when we investigated alleged Russian spies together with Belgian and Prague-based media in 2025.
You can also buy this in Western Europe, but it’s more expensive, said another contact in the private-intelligence sector. Sometimes, you can follow people’s movements with GPS-precision if they ever downloaded other apps, such as the once popular ‘Candy Crush’ game, on their phones, as this, for one, used to automatically update users’ locations to a cloud.
And there’s also in-real-life surveillance for hire, as in the case of a Kazakh refugee in Brussels, who was filmed with HD cameras through her windows by a British firm, followed by a car, and had her garbage intercepted.
“The [Belgian] law forbids almost everything we need to do in order to be effective, but everyone does it anyway,” said a Belgian private detective, in a modus operandi typical of the sector in Europe.
And going back to state actors, Israeli spyware, such as Pegasus, which costs hundreds of thousands of dollars, has also been used to target enemies of malign EU governments in the past, including journalists, which all makes you wonder how to hide your secrets these days.
Meanwhile, it’s a big wrench to communicate with people offline. So, unless it’s a very special case for which you make a big encryption effort, you just have to assume that everything you write online can be compromised if someone really goes after you, and consider that innocence is your best, if not only, self-defence in the era of digital panopticons.
