Court Watch and 404 Media reported on October 17 that documents released by a U.S. federal court show Telegram provided limited user metadata to U.S. authorities in a September 2026 response. The reported fields were a phone number, user ID, display name, and the last-login IP address and timestamp; the same report says chat content and contact information were not provided in that response.

What Telegram reportedly gave U.S. authorities

The October 17 reporting describes a specific metadata disclosure rather than a broad release of messages. In the September 2026 response, Telegram reportedly provided the user’s phone number, Telegram user ID, account display name, and the IP address and timestamp of the last login.

That scope matters because “user data” can mean very different things. In this case, the supplied report says the response did not include chat content or contact information, which draws a clear line between account-identification details and message bodies.

The same report also says Telegram called the provision “voluntary” and did not acknowledge U.S. jurisdiction. That describes Telegram’s stated posture in the reported response, but it does not establish the exact legal instrument behind the request.

How Telegram's post-September 2024 disclosure rule reportedly works

Retrieved secondary reporting describes Telegram’s post-September 2024 rule as conditional, not automatic. A BBC search excerpt says Telegram may disclose IP addresses and phone numbers after a valid order from relevant judicial authorities confirms that a user is suspected in criminal activity that violates Telegram’s Terms of Service.

A Bitdefender search excerpt points to the same structure: a judicial request, Telegram’s own legal review, and possible disclosure of phone numbers and IP addresses. Read that way, the reported September 2026 response fits a narrower compliance channel focused on identity and login metadata, not a blanket commitment to provide all account data on request.

That still leaves important boundaries unresolved. The available material does not establish whether the request in this case was a subpoena, warrant, court order, or another process, and it does not show whether the listed fields were the complete set of information at issue in the underlying matter.

What this means for users and the request-count caveat

The practical takeaway is that Telegram account identifiers and login-related metadata may be disclosable in qualifying criminal investigations, even when the cited response did not include chat content. For privacy-conscious users, the most important distinction is between message content on one side and metadata that can help identify or trace an account on the other.

The commonly cited request totals around this story need a narrower reading. The supplied report frames Telegram as responding to about 900 U.S. law-enforcement requests involving 2,253 users during 2024, but a retrieved Freedom of the Press Foundation search excerpt describes those same figures as applying to October through December 2024, after 14 requests affecting 108 users from January through September.

Because those two versions do not match on period definition, the 900-request figure should not be treated as a settled full-year metric. The safer reading is that secondary reporting points to a sharp increase in U.S. compliance activity after the September 2024 policy shift, while the exact reporting window behind the 900 and 2,253 figures remains unresolved here.