Prior to September 2024, Telegram’s policy regarding encrypted communications stated that user data would only be shared with law enforcement in cases of terrorism. However, this stance shifted when the company’s CEO, Pavel Durov, who is of Russian descent, was arrested in France in late August and subsequently released on a $5 million bond.
By the end of September, Telegram had revised its approach, agreeing to provide law enforcement with user information such as phone numbers and IP addresses in instances of fraud and other cybercrimes. Additionally, Telegram committed to issuing transparency reports on the data disclosed as a result of law enforcement requests. The latest transparency report from Telegram indicates a significant increase in the platform’s collaboration with law enforcement since September.
According to Telegram, the company received 14 requests from the US government in the first nine months of 2024, affecting a total of 108 users. The information was first reported by 404 Media. By the end of the year, Telegram stated that it had fulfilled a total of 900 requests from the US, impacting 2,253 users.
The next transparency report from Telegram is expected to be released in April.
Impact of Telegram’s Data Sharing Policy
Following Durov’s arrest last year, experts predicted that Telegram’s operations in combating cybercrime would remain largely unaffected. While there may be short-term benefits such as arrests and disruption of certain cybercrime activities, cybercriminals are likely to seek out alternative platforms that prioritize privacy or utilize decentralized structures. Callie Guenther, senior manager of cyber-threat research at Critical Start, suggests that platforms like Signal, Session, and darknet services could become the new focal points for illicit activities, leading to a more dispersed ecosystem that poses challenges for law enforcement efforts.
In the broader context, the shift in Telegram’s policy reflects a growing trend of increased governmental pressure on tech companies to assist law enforcement. Guenther highlights Durov’s arrest as a prominent example of this trend.
Guenther emphasizes the ongoing debate between privacy and security, noting that cybercriminals will likely adapt to the evolving landscape, posing challenges for investigators and cybersecurity professionals. Finding a balance between these considerations will be crucial in addressing the changing dynamics of online threats while upholding privacy protections.
