{"id":28270,"date":"2023-01-06T18:29:59","date_gmt":"2023-01-06T18:29:59","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2023\/01\/06\/over-200-million-email-addresses-leaked-in-twitter-breach\/"},"modified":"2023-01-06T18:29:59","modified_gmt":"2023-01-06T18:29:59","slug":"over-200-million-email-addresses-leaked-in-twitter-breach","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2023\/01\/06\/over-200-million-email-addresses-leaked-in-twitter-breach\/","title":{"rendered":"Over 200 million email addresses leaked in Twitter breach"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

Hackers have posted usernames and email addresses belonging to over 200 million Twitter users in a database. The data was compiled from several Twitter breaches dating back to 2021, and while the online database does not include passwords, the collection of data will likely pose a security threat to those exposed.<\/p>\n

Several reports from security researchers and media outlets, including The Verge\u00a0<\/em><\/a>and\u00a0Bleeping Computer<\/em><\/a>, have detailed the breach, with researcher Alon Gal warning the breach<\/a> \u201cwill unfortunately lead to a lot of hacking, targeted phishing, and doxxing.\u201d<\/p>\n

Bleeping Computer\u00a0<\/em>shared screenshots of the database, revealing it contains several text files listing email addresses and linked Twitter usernames along with email addresses and real names (if users shared their real names with Twitter). The database also includes information like users\u2019 follower counts and account creation dates.\u00a0Bleeping Computer\u00a0<\/em>also said it was able to confirm the validity of many email addresses including in the leak. The database is being sold on one hacking forum for as low as $2 USD.<\/p>\n

Troy Hunt, who created the cybersecurity alert site \u2018Have I Been Pwned<\/a>\u2018 to help people check if their phone number or email was included in a data breach, posted on Twitter<\/a> that he found 211,524,284 unique email addresses in the Twitter breach. \u201c[The breach] looks to be pretty much what it\u2019s been described as,\u201d Hunt wrote.<\/p>\n

\n

Found 211,524,284 unique email addresses, looks to be pretty much what it\u2019s been described as<\/p>\n

\u2014 Troy Hunt (@troyhunt) January 5, 2023<\/a><\/p>\n<\/blockquote>\n

The breach has since been added to Have I Been Pwned<\/a> so Twitter users can head to the site and check if their information was included in the breach.<\/p>\n

As mentioned above, the Twitter breach can trace its origins back to 2021<\/a> when hackers found a vulnerability in Twitter\u2019s security systems. That vulnerability allowed malicious actors to look up accounts with an automated system that entered email addresses and phone numbers to see if they were associated with Twitter accounts.<\/p>\n

Twitter disclosed the vulnerability in August 2022<\/a> and claimed it fixed the issue in January after it was reported as a bug bounty. Moreover, Twitter said at the time it had \u201cno evidence to suggest someone had taken advantage of the vulnerability,\u201d but cybersecurity researchers had already found databases of Twitter credentials for sale in July 2022<\/a>. This latest database of Twitter info appears to have origins in the old vulnerability.<\/p>\n

Source: The Verge<\/a>, Bleeping Computer<\/a><\/p>\n<\/p><\/div>\n