Over 200 Million Twitter Users’ Details Leaked on Hacker Forum

Information of 235 million Twitter accounts have been posted to an on the net hacking discussion board, exposing identities by enabling anonymous handles to be joined to email addresses and relevant authentic-globe names.

According to security specialist and Hudson Rock CTO Alon Gal, who had confirmed the knowledge, the databases was circulating heavily earlier in the 7 days and has now been leaked.

“The database is made up of 235,000,000 unique documents of Twitter consumers and their email addresses and will, unfortunately, guide to a whole lot of hacking, specific phishing, and doxxing,” the cybersecurity specialist wrote on LinkedIn. “This is one of the most considerable leaks I have found.”

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

The leaked facts also reportedly bundled names, usernames, email addresses, follower counts and creation dates.

According to VMware’s solution line marketing and advertising manager Ron Scott-Adams, nonetheless, the info is at least two decades old and is made up mostly of publicly offered info (excluding email addresses).

Jamie Boote, affiliate principal advisor at Synopsys, told Infosecurity the knowledge could have resulted from a web scraping career leveraging an previous (and now fastened) Twitter bug.

“In 2021, people found out that the Twitter API could be used to disclose email addresses that had been presented from other sources and also leak some other semi-public facts like tying a Twitter take care of with that email address,” reported Boote.

“Several teams then employed leaked email dumps as seed product to start out farming for handles that they could then [use to] collect other facts this sort of as follower counts, profile creation day, and other information available on a Twitter profile.”

The govt extra that the issue was fastened very last yr, so the leak looks like someone “gathered a bunch of these—plus merged with some new accounts—and attempted to get [Elon] Musk to fork out up for them.”

Boote explained this is a regular example of how an unsecured API that developers layout to “just operate” can stay unsecured due to the fact when it arrives to security, what is out of sight is frequently out of intellect.

“Humans are awful at securing what they can’t see. As generally, destructive actors have your email address,” Boote extra.

“To be secure, consumers ought to change their Twitter password and make guaranteed it can be not reused for other websites. And from now on, it is really most likely very best to just delete any emails that appear like they’re from Twitter to stay away from phishing frauds.”

The leak arrives months immediately after a independent breach afflicted about 5 million Twitter consumers in November 2022.