The company claiming to have broken Signal was simply pulling the database of messages off of an unlocked phone. It’s definitely not a hack and the blog post has since been heavily retracted.