If a user has a BES system, his BBM Protected has an additional encryption layer with a unique key. It's not possible to break into it. Regular BBM messages are decrypted by BlackBerry under court order in exceptional instances.