It has long been known that telephony services like SMS are not secure. When your infrastructure provider is hostile it gets challenging to protect your users.
Iranian hackers have compromised more than a dozen accounts on the Telegram instant messaging service and identified the phone numbers of 15 million Iranian users, the largest known breach of the encrypted communications system, cyber researchers told Reuters.
Source: Exclusive: Hackers accessed Telegram messaging accounts in Iran – researchers