Apple’s iOS 26.4.2 and iPadOS 26.4.2 releases patch a vulnerability that let the FBI pull deleted Signal message previews from an iPhone’s internal notification database. The flaw surfaced when a device set to show Signal content on the lock screen retained message data after the app was removed.

Court testimony revealed that the FBI accessed this data during a criminal case, exposing a serious privacy gap. Apple’s update tightens logging and redacts sensitive data, ensuring that notifications meant to be deleted no longer linger in the database.

Users on iOS 26, iPadOS 26, iOS 18, or iPadOS 18 must install the latest build to protect personal messages. The fix closes a loophole that could have allowed law‑enforcement agencies to recover private communications from otherwise deleted apps.