There is really no reason to believe that Signal itself was broken/breached.

Far more likely his device was pwnd and messages read via screen recording or some other method.