Telegram Bug Leaks Russian TV News Station’s Internal Chats to Random User · Global Voices

Telegram boasts secure communications, however security experts have questioned the robustness of its cryptography. Apart from “rolling its own crypto” instead of relying on existing encryption solutions, there is the matter of device dependence. By default, Telegram uses text-based authorization, which allows users to connect new devices to Telegram accounts simply by entering a verification code received via text message on a smartphone. Two-step verification can be enabled, but is not required.

But these known elements of Telegram's systems do not fully explain why Gorbacheva, whose device had seemingly never belonged to anyone associated with TV Rain, suddenly began receiving notifications of their private messages. Gorbacheva's experience suggests that Telegram's security flaws may be worse than critics previously thought.

So what do you do if your Telegram suddenly starts spewing unsolicited notifications or showing strange contacts? Durov says the only sure-fire solution is to deactivate your Telegram account by opening this link directly in the messenger, which will make all your chat logs and files disappear.