https://news.ycombinator.com/item?id=43875476
And that article contains a link to the 404media.co story, reporting the hack, and other commentary about the security of the app.
And there are several mentions in that discussion thread about the 404media.co story, and I've pinned another link to the top of that thread.
If we had a separate thread it would split the discussion and we always avoid doing that; it makes more sense to keep it all in one thread, as it really is one topic.
It should also be noted the article specifically states:
“The hacker has not obtained the messages of cabinet members, Waltz, and people he spoke to . . .”, so it’s not actually a breach of administration communication that it first seems to be from the headline.