Signal is point to point encrypted, so theoretically secure...although adding a phone number by accident, and then continuing to discuss when you don't recognize everyone, we'll, that is pretty stupid.
One wonders who had the Atlantic dude in his contacts. Sounds like an inside job.