A targeted phishing campaign exploited Signal’s linked-device feature to compromise the Signal account of Germany’s Bundestag President Julia Klöckner, with reports indicating hundreds of German government and ministerial accounts were affected. Attackers gained persistent access to encrypted communications without breaking Signal’s encryption by tricking officials into linking attacker-controlled devices to their accounts. Russia-linked threat actors are attributed at medium confidence, and the campaign indicates that nation-state actors are systematically targeting secure messaging platforms used by senior government officials as an alternative to attempting cryptographic attacks on Signal’s encryption.