Skip to main content
CybersecuritySocial Engineering

Poland Shifts Officials to State Messaging App Citing Security Concerns

Officials in a meeting room with a laptop showing a state messaging app and a smartphone nearby.

Poland has directed officials to “ditch Signal” in favor of a “secure” state-developed alternative — a move made public as the government grapples with mounting reports of successful social engineering attacks targeting higher-ups in government.

Poland's order for officials

The government directive is simple in its language and consequential in its target: officials are being told to stop using the messaging app Signal and to adopt a messaging platform built and labeled by the state as “secure.” The instruction is cast as a substitution — Signal out, a state-developed option in — with the change directed at people working inside government channels.

The "secure" state-developed alternative

The replacement is described in available reporting only as a state-developed alternative and characterized in quotation marks as “secure.” The source material does not provide a public name for the new application, nor does it publish technical specifications, timelines for rollout, or details about who inside the state built or will operate the system. What is explicit is that Poland is positioning the new app as the official, state-originated successor to Signal for internal use.

Mounting social engineering attacks targeting higher-ups in government

The announcement is being made in the context of what the reporting calls “mounting reports of successful social engineering attacks targeting higher-ups in government.” Those reports are cited as the contemporaneous backdrop for the directive: the switch to a state-developed tool comes amid an uptick in successful social-engineering incidents involving senior government figures.

Who is immediately affected: government officials, security teams, and communications staff

  • Government officials: The directive is addressed to officials and, therefore, requires them to change the messaging tools they use for official communication.
  • Security teams: Operational responsibility for implementing any mandated migration, and for integrating a state-developed messaging service with existing systems, will fall to internal security teams and administrators tasked with official communications.
  • Communications staff: Those responsible for official messaging and continuity of communications will need to coordinate any transition to the state-developed alternative to maintain business-as-usual operations.

Conclusion: a state-led switch amid reported successful social engineering

Poland’s directive to abandon Signal in favor of a “secure” state-developed messaging platform is presented in the reporting as a direct response to a wave of successful social engineering directed at senior officials. The public record at this time is limited to the directive itself and its stated context; the reporting does not publish the new app’s name, technical details, or an implementation timetable. The move raises a clear, immediate question: whether a state-developed alternative — once named and described — will be able to address the kinds of social-engineering incidents cited as the reason for the change.

Original reporting: The Register — Poland directs officials to ditch Signal in favor of 'secure' state-developed alternative