There are several ways. There could be a vulnerability in one of the underlying algorithms, in the crypto system, or in the implementation.

I’m not saying signal isn’t secure, but encryption can absolutely be hacked.