Independent review confirms Telegram tracking vulnerability, raising new privacy concerns

Independent review confirms Telegram tracking vulnerability, raising new privacy concerns

Independent review confirms Telegram tracking vulnerability, raising new privacy concerns

https://weeklyblitz.net/2026/05/21/independent-review-confirms-telegram-tracking-vulnerability-raising-new-privacy-concerns/

Publish Date: 2026-05-20 14:05:00

Source Domain: weeklyblitz.net

Independent review confirms Telegram tracking vulnerability, raising new privacy concerns

A newly released independent cybersecurity review has confirmed the existence of a significant privacy vulnerability in Telegram, supporting earlier findings by investigative journalists who warned that the popular messaging platform may expose users to long-term tracking by governments, internet providers, and other entities capable of monitoring network traffic.

The review, conducted by cybersecurity firm Symbolic Software and obtained by Important Stories, found that Telegram’s infrastructure transmits a persistent device identifier known as an “auth_key_id” in a manner that can be observed without breaking the platform’s encryption. According to the researchers, the identifier remains stable over extended periods and across changes in internet connections, geographic locations, and network providers, creating the potential for passive surveillance of Telegram users.

The findings reinforce conclusions first published in a 2025 investigation by the Organized Crime and Corruption Reporting Project (OCCRP) and its Russian investigative partner Important Stories (IStories). That investigation examined Telegram’s technical infrastructure as well as its connections to Russian network engineer Vladimir Vedeneev, a figure alleged to have ties to Russia’s Federal Security Service (FSB).

At the center of the controversy is Telegram’s use of the auth_key_id, a technical identifier associated with a user’s encryption key. While encrypted messaging services routinely employ various identifiers to maintain secure communications, the cybersecurity review concluded that Telegram’s implementation creates an unusual privacy risk because the identifier can be detected by observers monitoring internet traffic.

Researchers found that Telegram clients transmit messages in a way that leaves the…

Source