The Pentagon’s acting inspector general has a review into Defence Secretary Pete Hegseth’s use of the Signal messaging app to convey plans for a military strike against Houthi militants in Yemen.

The review will also look at other defence officials’ use of the publicly available encrypted app, which is not able to handle classified material and is not part of the Defence Department’s secure communications network.

Hegseth’s use of the app came to light when a journalist, Jeffrey Goldberg of The Atlantic, was inadvertently added to a Signal text chain by national security adviser Mike Waltz.

The chain included Hegseth, Vice President JD Vance, Secretary of State Marco Rubio, Director of National Intelligence Tulsi Gabbard and others, brought together to discuss 15 March military operations against the Iran-backed Houthis.

“The objective of this evaluation is to determine the extent to which the Secretary of Defence and other DoD personnel complied with DoD policies and procedures for the use of a commercial messaging application for official business,” acting inspector general Steven Stebbins said in a notification letter to Hegseth.

“Additionally, we will review compliance with classification and records retention requirements.”

In the chain, Hegseth provided the exact timings of warplane launches and when bombs would drop, before the US service personnel carrying out those attacks were airborne.

The review was launched at the request of Republican Senator Roger Wicker, chairman of the Senate Armed Services Committee, and Rhode Island Senator Jack Reed, the committee’s top Democrat.

In congressional hearings, Democratic lawmakers have expressed concern about the use of Signal and pressed military officers on whether they would find it appropriate to use the commercial app to discuss military operations.

Both current and former military officials have said the level of detail Hegseth shared on Signal most likely would have been classified.

The Trump administration has insisted no classified information was shared and dismissed the incident as a “glitch.”