If a person is using a BES system his BBM Protected has an extra encryption layer with custom key. It's impossible to hack it. However under extreme circumstances regular BBM messages are decrypted by BlackBerry under court order.