Twitter Breach Before Musk’s Big Announcement, 5.4 Million People’s Data Leaked
Twitter’s new owner Elon Musk is going to launch its verification feature called Verified on December 2. But, before that, the data of 5.4 million Twitter users has now been stolen.
Image Credit Source: Representational Image
Twitter’s new owner Elon Musk On December 2, we’re launching our verification feature called Verified. But, before that now 54 lakhs Twitter Users’ information has been stolen. According to reports, these data records were stolen through an internal breach. And it leaked online on a hacker forum. In addition, 14 lakh Twitter profiles are collected through a separate Twitter application interface (API). If reports are to be believed, they have been shared among a few people.
The leaked data includes phone numbers and email addresses
According to the report, this data also includes personal phone numbers and email addresses. Besides, the leaked data also includes deleted data. Recently, Musk also spoke on Twitter 2.0. He said signups of new users on the platform are at a record high and now the company is hiring new people fast. In such circumstances this phenomenon becomes more important.
Security expert Chad Loder first broke the news on Twitter. After that he was removed from the platform. He posted on Twitter that he had just received information about a major data breach involving Twitter users, affecting millions of Twitter accounts in the European Union and the United States. He said in the post that he contacted a sample of the affected accounts and they confirmed that the stolen data was correct. Loder said the breach did not occur before 2021.
How was the information stolen?
The data also includes non-public information that was stolen using a Twitter API flaw that was patched in January this year. The report states that this data was collected in December 2021 using a Twitter API flaw mentioned in the Hacker One bug bounty program.
Most of the information consists of public information. This includes Twitter IG, name, login name, location and verified status. It also contains personal data such as phone numbers and email addresses.