Meghan Markle's personal cellphone number was exposed after a parent in a school WhatsApp group screenshotted the chat and shared it, the same week she and Prince Harry pulled their children from the school over security concerns.
The leak happened fast. Markle, 45, joined the parents' WhatsApp group the night before Prince Archie, 7, and Princess Lilibet, 5, started at a UK school. Someone in the group captured a screenshot of the conversation, which included her personal number, and circulated it multiple times, Page Six reported.
The Sun published the screenshot on Tuesday, showing Markle's message to the group: "Hi moms! Thanks for the warm welcome ❤️ So happy to be a part of this community xx." Another parent had written, "Welcome to Meghan who has Archie joining tomo." Within two days of classes starting, Harry and Markle yanked both children from the school, citing security concerns.
A representative for the couple told Hello! magazine that "the decision for the children to move school was taken following a discussion with the family's security team about the practicalities of their current arrangements." An unnamed insider gave the magazine a softer version: "It's a real shame, because they absolutely adored the school, the kids and their parents."
Hello! also reported Monday that heavy traffic to and from the school was straining the family's small security team, a detail that suggests the logistical problems extended well beyond a leaked phone number. The school's name and location have not been publicly disclosed.
The phone leak landed in the middle of a broader security reassessment. The Telegraph reported that the chairman of RAVEC, the Royal and VIP Executive Committee, the government body that oversees protection for senior royals and high-profile officials, informed Harry last week that both he and Markle would be commissioned for a new risk assessment. RAVEC has also reportedly asked the couple to provide full details of their new daily routines, given their move back to the UK.
Markle was reportedly granted her first government-backed security review. That is a notable development for a woman who, along with her husband, has been formally barred from working royal status by King Charles. The couple remain private, non-working royals, a category that offers neither the Palace's institutional support nor its restrictions.
The security team that conducted checks at the school before term started has been described only as "small." No details have emerged about which agency or body responded to the phone number leak specifically, or whether Markle has since changed her number.
The WhatsApp breach did not happen in a vacuum. On Sunday, days before the leak became public, Markle posted an intimate Instagram video documenting the family's return to Britain. The footage showed Lilibet riding her bike, Archie running beside her, and Harry taking the children out on a boat to fish. On Tuesday, Markle posted an Instagram Reel for Harry's 42nd birthday, set to "He's Simply the Best" by The Hound + The Fox, with the caption: "He's simply the best. Happy birthday, my love ❤️."
Royal commentator Kinsey Schofield, speaking exclusively to Page Six on Sunday, pointed to a gap between the couple's stated desire for privacy and their social media activity. Fox News reported Schofield's broader warning that Markle "is also returning without palace protection. You don't get one without losing the other."
Schofield told Page Six directly:
"If privacy is genuinely the priority, the most effective strategy is simple... stop broadcasting your family life to millions of strangers. Every hyper-curated glimpse of the children, the dogs, the countryside and their domestic routine invites more attention, more questions and more interest in where and how they are living."
She added: "You cannot deliberately feed that machine and then act astonished or outraged when people want to know more."
That observation cuts to the core tension in the Sussexes' public posture. They have spent years framing themselves as victims of invasive media coverage, and they have real grievances, including this phone leak, which no parent should have to deal with. But they also voluntarily posted footage of their children, their home life, and their daily routines to millions of Instagram followers days before complaining that their privacy had been violated.
This is not the first time the line between Markle's public persona and her private expectations has blurred in an unflattering way. During a Court of Appeal hearing in London, lawyers for the Mail on Sunday's publisher argued that Markle had crafted a handwritten letter to her father Thomas Markle with the possibility of public exposure in mind. Her former communications secretary, Jason Knauf, stated she told him the letter was drafted "with the understanding that it could be leaked." AP News reported that Markle allegedly asked Knauf whether to address her father as "Daddy" because, in the event of a leak, "it would pull at the heartstrings."
Markle later submitted written evidence stating: "To be clear, I did not want any of it to be published, and wanted to ensure that the risk of it being manipulated or misleadingly edited was minimized, were it to be exploited." A High Court judge had previously ruled that the Mail on Sunday's publication of the letter was "manifestly excessive and hence unlawful."
Separately, Markle's Spotify podcast "Archetypes" drew scrutiny when multiple sources told Podnews that some interviews were conducted by production staffers, with Markle's questions edited in afterward. Andy Scott, a former editor at Gimlet Media, which produced the show, confirmed that "producers occasionally conducted interviews," though he said it was "never the main ones." The couple ultimately lost their $25 million Spotify deal after delivering only one 12-episode podcast in three years.
None of that excuses a parent leaking another parent's phone number from a school chat. But it does make the couple's repeated insistence that they are blindsided by public attention harder to accept at face value. Harry and Markle moved back to Britain as private citizens, enrolled their children in school, and, before the first week of classes ended, found themselves at the center of exactly the kind of media storm they say they left the country to escape.
The decision to pull Archie and Lilibet from school just two days into the term is the sharpest consequence so far. Whether RAVEC's new risk assessment leads to meaningful government-backed protection remains an open question, as does whether the Palace, which has no authority over Markle's Instagram posts or commercial projects, will find any mechanism to manage the couple's public footprint.
The broader royal family has largely declined to engage. William and Kate's posture toward the Sussexes' return has been conspicuously quiet, and the reception from neighbors in the Cotswolds has been mixed at best.
Who screenshotted the WhatsApp conversation and distributed it has not been disclosed. Whether the screenshot was independently authenticated by either Page Six or The Sun is unclear. The name of the school, its location, and the specific nature of the security alert triggered by the leak have all been withheld from public reporting. What RAVEC's requested "full details of daily routines" will include, and what timeline the committee is working under, remain unknown.
Privacy is a legitimate concern, and children deserve to start school without their family's personal information being passed around by strangers. But privacy is also a two-way commitment, and a family that posts intimate home videos to millions of followers the same week it demands security reviews has made that commitment very hard for anyone else to take seriously.
