Twitter Addresses November Data Leak Claims

Social media firm Twitter has issued a general public statement about allegations that it was hacked before this yr.

Composing in a web site publish on Friday, the Elon Musk-owned platform claimed it figured out that an individual experienced perhaps exploited a vulnerability that Twitter reportedly found out in January and preset in June 2022.

The flaw enabled an individual submitting an email address to Twitter’s systems to discover an linked phone amount (if one particular existed) and vice versa.

✔ Approved From Our Partners

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code

According to the announcement, Twitter figured out of the vulnerability obtaining been exploited in July, with someone supplying to provide the data they experienced compiled.

“Following examining a sample of the offered knowledge for sale, we confirmed that a bad actor experienced taken edge of the issue in advance of it was resolved. At the time, we notified the afflicted consumers immediately,” reads the site submit.

“As before long as we turned knowledgeable of the information, Twitter’s Incident Reaction Team in comparison the knowledge in the new report to details noted by the media on 21 July 2022. The comparison determined that the exposed details was the identical in the two scenarios.”

The company also clarified that even though no passwords ended up exposed, Twitter prompted end users to enable 2-factor authentication (2FA) to shield accounts from unauthorized logins.

“We also inspire Twitter people to stay extra vigilant when acquiring any sort of communications about email, as danger actors might leverage the leaked information and facts to develop incredibly efficient phishing strategies.”

The information arrives weeks soon after numerous C-amount security and privacy executives resigned from Twitter next the Elon Musk acquisition of the social media organization.

“With all of the adjustments at Twitter around the prior number of months and fears about security at the website, the stories of person data leaks were being understandably troubling to end users, irrespective of Twitter’s makes an attempt to lessen concerns,” mentioned Melissa Bischoping, director of endpoint security research at Tanium.

“Even though the leaked details could have been the consequence of the formerly compiled information and reportedly does not incorporate passwords, consumers ought to nevertheless take into consideration this a well timed reminder to audit credential cleanliness and multi-factor authentication enforcement on all their accounts.”