{"id":25985,"date":"2022-12-26T22:03:49","date_gmt":"2022-12-26T22:03:49","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/26\/ireland-launches-probe-into-twitter-over-november-data-leak\/"},"modified":"2022-12-26T22:03:49","modified_gmt":"2022-12-26T22:03:49","slug":"ireland-launches-probe-into-twitter-over-november-data-leak","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/26\/ireland-launches-probe-into-twitter-over-november-data-leak\/","title":{"rendered":"Ireland launches probe into Twitter over November data leak"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

Ireland\u2019s Data Protection Commission on Friday <\/span>launched<\/span><\/a> a probe into Twitter Inc. over a cybersecurity breach that affected 5.4 million of the company\u2019s users.<\/span><\/p>\n

At the start of the year, Twitter was notified of a vulnerability in one of its application programming interfaces. The vulnerability enabled hackers to learn the phone numbers and email addresses associated with Twitter accounts. According to the company, the issue emerged as a result of a faulty software update released in June 2021.<\/span><\/p>\n

Twitter rolled out a patch soon after it was notified of the API vulnerability. However, hackers by then managed to steal information belonging to 5.4 million Twitter users. That information was leaked<\/a> last month, which is what prompted Ireland\u2019s Data Protection Commission to launch its newly announced probe.<\/span><\/p>\n

Prior to the launch of the probe, officials requested additional information from Twitter about its compliance with data privacy regulations. After reviewing the information, the Data Protection Commission determined that the company may have infringed the European Union\u2019s GDPR privacy law. The regulator found that Twitter may have also breached the Data Protection Act 2018, the U.K.\u2019s implementation of GDPR.<\/span><\/p>\n

The probe will be carried out by the Data Protection Commission because Twitter\u2019s EU head office is located in Ireland. The company maintains a presence in Ireland through a subsidiary called Twitter International Unlimited Company that is also known as TIC.\u00a0<\/span><\/p>\n

\u201cThe DPC considers it appropriate to determine whether TIC has complied with its obligations, as controller, in connection with the processing of personal data of its users or whether any provision(s) of the GDPR and\/or the Act have been, and\/or are being, infringed by TIC in this respect,\u201d the regulator stated.<\/span><\/p>\n

Previously, the Data Protection Commission <\/span>issued<\/span><\/a> a \u20ac450,000 fine to Twitter over its response to an earlier cybersecurity vulnerability. The vulnerability made some Android users\u2019 private tweets publicly accessible for several years. Twitter resolved the issue in early 2019.<\/span><\/p>\n

The EU\u2019s GDPR law requires companies to promptly notify regulators of cybersecurity incidents, as well as provide detailed technical documentation. The Data Protection Commission fined Twitter \u20ac450,000 Twitter after determining the company failed to meet those criteria.<\/span><\/p>\n

Meta Platforms Inc. has also drawn regulatory scrutiny in Ireland. Last month, the Data Protection Commission issued<\/a>\u00a0a\u00a0\u20ac265 million fine to the company for not adequately securing Facebook users\u2019 data. In September, Meta received<\/a> a separate\u00a0\u20ac400 million penalty after officials determined that Instagram had failed to comply with GDPR privacy requirements.\u00a0<\/span><\/p>\n

Photo:\u00a0Wikimedia Commons<\/a><\/h5>\n
\n
\n

Show your support for our mission by joining our Cube Club and Cube Event Community of experts. Join the community that includes Amazon Web Services and Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsinger and many more luminaries and experts.<\/span><\/h3>\n<\/div><\/div>\n