42 million user IDs and phone numbers for a third-party version of Telegram were exposed online without a password. The accounts belong to users in Iran, where the official Telegram app is blocked.
How is that a state exploit of Telegram? It’s not even about Telegram. It’s a third party app.