Twitter (200M) data breach: 211.5M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2023-01-05
In early 2023, over 200M records scraped from Twitter appeared on a popular hacking forum. The data was obtained sometime in 2021 by abusing an API that enabled email addresses to be resolved to Twitter profiles. The subsequent results were then composed into a corpus of data containing email addresses alongside public Twitter profile information including names, usernames and follower counts. Exposed data: email addresses, names, social media profiles, usernames. The breach dates from Jan 1, 2021; Have I Been Pwned loaded it on Jan 5, 2023.
What to do
- If you had a Twitter (200M) account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch