If I remember correctly, the user in question kept exported plain-text backups of the conversations on the phone. The encryption of the app itself was not breached.