{"id":26199,"date":"2022-12-28T00:43:01","date_gmt":"2022-12-28T00:43:01","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/28\/data-of-400m-twitter-users-offered-for-sale-on-hacking-forum\/"},"modified":"2022-12-28T00:43:01","modified_gmt":"2022-12-28T00:43:01","slug":"data-of-400m-twitter-users-offered-for-sale-on-hacking-forum","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/28\/data-of-400m-twitter-users-offered-for-sale-on-hacking-forum\/","title":{"rendered":"Data of 400M Twitter users offered for sale on hacking forum"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

A hacker is offering data from some 400 million Twitter accounts for sale that is said to have been scrapped via an application programming interface vulnerability.<\/p>\n

The hacker goes by the name of Ryushi on BreachForums,\u00a0the successor site to the\u00a0now-shuttered<\/a>\u00a0RaidForums. The hacker claims that the data includes the email addresses and phone numbers of celebrities, politicians, companies and others.<\/p>\n

On the listing, Ryushi lists email addresses for Donald Trump Jr., Alexandria Ocasio-Cortez, Neil DeGrasse Tyson, Piers Morgan, Stephen Curry and various others. The hacker also links to a .CSV file with the same information for an additional 1,000 Twitter users as further proof.<\/p>\n

In a twist, the hacker also addresses both Twitter and Elon Musk, claiming that their best option is to purchase the data \u2013 which is then claimed to be 533 million users, to avoid the risk of a European Union General Data Protection Regulation fine. Ryushi then adds that if Musk or Twitter purchases the data, the data will not be sold to others \u201cwhich will prevent a lot of celebrities and politicians from phishing, crypto scams, sim swapping, doxing and other things that will make your users lose trust in you as a company.\u201d<\/p>\n

\u201cFrom [sic] content creators this is a sensitive time, which will make things far worse and if you are unsure just run a poll on Twitter like usual and people will choose their fate because at the end of the day it\u2019s the company\u2019s fault that this data was breached,\u201d the hacker added.<\/p>\n

According to<\/a> Bleeping Computer, the hacker collected the private phone numbers and email addresses using an API vulnerability that Twitter fixed in January 2022. The same API vulnerability is believed to have been used to steal data relating to 5.4 million Twitter users that first appeared in July and then were released for free in November<\/a>.<\/p>\n

While the validity of the claimed 400 million plus or 533 million users \u2013 the hacker uses both numbers, is not confirmed, if any of it is legitimate \u2013 there\u2019s no reason to think otherwise, the stolen data will gain the attention of regulatory authorities.<\/p>\n

Last week<\/a>, Ireland\u2019s Data Protection Commission announced that it had launched a probe into the previous 5.4 million stolen Twitter records.<\/p>\n

Before the launch of the probe, the commission requested additional information from Twitter about its compliance with data privacy regulations. Having reviewed the information, the commission determined that the company may have infringed the EU GDPR and the Data Protection Act 2018, the U.K.\u2019s implementation of GDPR.<\/p>\n

Image: BreachForum<\/h5>\n
\n
\n

Show your support for our mission by joining our Cube Club and Cube Event Community of experts. Join the community that includes Amazon Web Services and Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsinger and many more luminaries and experts.<\/span><\/h3>\n<\/div><\/div>\n