Tracking & Law Enforcement

Telegram Shared Data of Thousands of Users After CEO’s Arrest

After its CEO was arrested last summer, Telegram has been increasingly sharing user data at the request of authorities.

Telegram shares user data

Following the arrest of its CEO last summer, Telegram has been increasingly sharing user data at the request of authorities, according to data collected by researchers. 

French authorities arrested Telegram CEO Pavel Durov, a dual citizen of France and Russia, in August 2024 as part of an investigation into criminal activities facilitated by the privacy-focused messaging application. Durov was targeted by prosecutors over Telegram enabling organized crime and its refusal to cooperate with authorities. 

Durov was released several days later and promised to make significant improvements in an effort to tackle the use of the platform for illicit activities, as well as to provide — in response to valid legal requests — the IP addresses and phone numbers of users who violate rules. 

Telegram provides a bot that shares a very brief transparency report for each user’s respective country, revealing the number of law enforcement requests for IPs and/or phone numbers, as well as the number of affected users. 

Two researchers, including one working with Human Rights Watch, recently launched a crowdsourced effort and have been sharing the collected data on a publicly available GitHub page

The data shows a surge in the last quarter of 2024 compared to the previous quarters. While data is not available for many countries, in some countries authorities made hundreds of requests in an effort to obtain data on thousands of users. 

Advertisement. Scroll to continue reading.

The data shows that roughly 2,000 users have been targeted by authorities in the United States, Germany and France. A few hundred users were targeted in the United Kingdom, Spain, Belgium, and the Netherlands. 

Telegram’s ‘Transparency Reports’ bot reveals that the company will publish an annual DSA transparency report for 2024 — DSA stands for the EU’s Digital Services Act, which aims to prevent illegal and harmful activities online — later this month. 

Related: X Releases Its First Transparency Report Since Elon Musk’s Takeover

Related: Ukraine Bans Telegram Messenger App on State-Issued Devices Because of Russian Security Threat

Related: Telegram Zero-Day Enabled Malware Delivery

Related: After Microsoft and X, Hackers Launch DDoS Attack on Telegram

Related Content

Cybercrime

Law enforcement and tech companies disrupted infrastructure linked to scammers operating across Southeast Asia.

Cybercrime

The two own Dutch companies that allegedly provided bulletproof hosting services to Russia-aligned threat actors.

Cybercrime

The FBI says First VPN has been used by dozens of ransomware groups for network reconnaissance and intrusions.

Cybercrime

Authorities in 21 countries participated in a coordinated action against DDoS-for-hire services.

Cybercrime

Law enforcement in the US, UK and Canada identified more than $45 million in cryptocurrency and froze $12 million.

Cybercrime

Shchukin is accused of extorting more than $2 million as the head of the GandCrab and REvil ransomware operations.

Incident Response

Police in Germany physically warned organizations about the critical PTC Windchill vulnerability tracked as CVE-2026-4681.

Cybercrime

The lesser-known JackSkid and Mossad botnets have also been targeted in the operation.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version