Yes it is. It's not end-to-end encrypted, however. An attacker would need to have successfully attacked Telegram first.