They put a “technical device” on some servers to be able to access the messages. Assuming it really was end-to-end encryption they must either have had access to the keys (through a cracked device?) so that they could decrypt the messages or the crypto implementation had some sort of weakness they could exploit such as being open to padding oracle or timing attacks or mitm attacks.

Unfortunately I doubt they will release any details about how they cracked it. It would be interesting to know for sure.

Never heard of EncroChat, so let’s see what google says…

Hmm, so it claimed E2E however it was never audited and they didn’t use one of the well known good E2E styles, in addition they sold phones without secure enclave chips nor was any of that audited as well, so yeah I don’t see how it is trustworthy for such communications.

There’s so many ways that such systems can be weakened so it’s not surprising.

That passed through my mind, lol.