Cy4Data Labs Delivers Data Security (DATASEC) for Signal Users in Government and Industry

Cy4Signal Makes Stolen Messages, Voice, and Video Useless to Attackers by Ensuring Communications Remain Protected Outside the Application

SALT LAKE CITY--(BUSINESS WIRE)--Cy4Data Labs, a leader in data-centric security, today announced that government and industry customers can now secure the Signal Private Messenger app to protect communications from misconfiguration and third-party attacks resulting in data loss. With the Cy4Signal extension, data stolen via social engineering attacks is useless to bad actors. Any exposed messaging, voice, and video presents as encrypted to recipients without access to the keys, even if they inadvertently received the message, closing the gap for human error and rendering the communication fully secure.

“With social engineering attacks significantly augmented by fast-evolving technologies like agentic AI, Signal’s comparatively secure communications have become a high-value target and social-engineering channel, especially for espionage actors targeting people whose messages matter, such as government and business,” said Christina Richmond, Founder & Principal Analyst, Richmond Advisory Group. “By extending past the end-to-end encryption of the Signal platform, technologies like Cy4Signal enable users to go the final mile and protect data once it’s been fraudulently extracted from the Signal platform.”

Closing the gap of human error for end-to-end messaging platforms

According to the B2B app industry analyst firm Business of Apps, the Signal app is considered best-in-class for secure messaging. It has been downloaded 220 million times with 70 million active users as of 2024 with the most active users and groups sending hundreds of messages per day.

The Signal Protocol uses encryption to transmit messages more securely than traditional SMS, however, widespread attacks on the open-source platform demonstrate that its end-to-end secure messaging is subject to human error, third-party attacks and common vulnerabilities similar to other database-enabled applications with strong user bases in business and government. While only sender and receiver(s) can see the messages sent via the application, phishing attacks, user list mistakes, misconfigurations throughout the network, vulnerabilities in third-party software, malicious linked devices and other attacks have led to significant data exposure.

Cy4Signal’s field- and file-level protection ensures that what an attacker actually possesses is cryptographically locked information, not usable data. Because the protection travels with the data itself rather than residing in the infrastructure, there is no surrounding system for the attacker to compromise in order to strip the encryption away. Data remains mathematically unbreakable at the atomic level, permanently inaccessible regardless of the attacker's compute power, including Agentic AI attacks and future quantum capabilities.

“Signal provides a remarkably secure communications platform for users for whom data security is a major national security concern and remains as susceptible to social engineering attacks as any other technology,” said Todd Carper, CTO & Cofounder, Cy4Data Labs. “With Cy4Signal, we extend unbreakable encryption to government and business users using Signal combined with Cy4Secure to guard against data theft, ensuring that some of the world’s most sensitive data remains safe from hostile governments and other bad actors for improved national security and peace of mind.”

To schedule a data security stress test and see Cy4Data Labs’ data protection technology in action, click here. Cy4Data Labs on LinkedIn, Facebook, and Instagram for the latest on next-generation data security.

About Cy4Data Labs

Cy4Data Labs is redefining data security by protecting information at its core. Its flagship platform, Cy4Secure, delivers continuous security and real-time access control at the data layer, ensuring sensitive information remains secure and unusable to unauthorized parties, regardless of where it resides or how it is accessed.