A Trump official was in Moscow meeting with Russian President Vladimir Putin when he was added to a Signal group chat with more than a dozen top administration officials — and inadvertently, one journalist. The official, Steve Witkoff, who serves as President Trump’s envoy for Ukraine and the Middle East, was included in the chat to discuss a military operation in Yemen, according to CBS News, which cites flight data and Russian media reports.
Witkoff arrived in Moscow on March 13 and was filmed leaving the airport in a motorcade. Around 12 hours later, he was added to a Signal chat with top officials, including CIA Director John Ratcliffe and Director of National Intelligence Tulsi Gabbard, CBS News reports. The chat focused on a military plan targeting the Houthi rebels in Yemen. This week, it was revealed that journalist Jeffrey Goldberg from The Atlantic was also included in the chat, though it’s unclear why he was added.
Signal is a widely used messaging app known for its strong security. However, U.S. lawmakers have raised concerns about using a commercial app like Signal for discussions of sensitive military matters. The National Security Council confirmed the authenticity of the chat when contacted by CBS News.
Goldberg’s report revealed that Witkoff didn’t contribute to the conversation on Signal until after his return to the U.S. He had stopped in Azerbaijan on his way back. It’s unclear whether Witkoff used a U.S. government-issued phone or a personal device during his time in Russia. The U.S. government typically discourages officials from using messaging apps like Signal on government phones.
White House Press Secretary Karoline Leavitt responded to the report by stating that no “war plans” were shared and that the White House had provided guidance on safe communication platforms for officials.
While Witkoff was in Moscow, discussions in the Signal chat continued. At one point, Ratcliffe mentioned an active CIA officer, even though it was already late at night in Russia. Witkoff’s flight left Moscow around 2 a.m., and reports say he was in a meeting with Putin until about 1:30 a.m. local time.
While Signal is known for its encryption, experts say that its security might not be enough in this case. The app’s end-to-end encryption means that only the senders and receivers of a message can read it, but it is not foolproof. Russian hackers have been working to target Signal accounts, and Ukraine’s cybersecurity agency recently warned of phishing attacks on military and defense industry workers using the app.
Cybersecurity experts also pointed out that some smartphone hacking methods don’t require direct access to the device. One example is the Pegasus spyware, which can be remotely installed and allow hackers to control a device’s camera, microphone, and apps without the user’s knowledge.
