y’all have your #Signal notifications set to “Name Only” or “No Name or Content”, right…? 🤔
FBI Extracts Suspect’s Deleted Signal Messages Saved in iPhone Notification Database
“The #FBI was able to forensically extract copies of incoming Signal messages from a defendant’s #iPhone, even after the app was deleted, because copies of the content were saved in the device’s push notification database”
💰 https://www.404media.co/fbi-extracts-suspects-deleted-signal-messages-saved-in-iphone-notification-database-2/
a detailed write-up that’s not paywalled 👇
When deleting Signal is not enough: the FBI, iPhone notifications, and what #forensics can reveal
”A few days ago, 404 Media published a detailed report that made a lot of people uncomfortable: the FBI managed to recover Signal messages from a suspect’s iPhone, even though the app had already been uninstalled. No #encryption was broken. No Signal server was compromised. The messages were sitting in the phone’s own notification database, waiting to be found.”
https://andreafortuna.org/2026/04/11/signal-fbi-iphone-notifications-forensics/
#DFIR
#iOS