An expert in cybersecurity claims that hackers stole the email addresses of more than 235 million Twitter users and posted them on a website forum.
Alon Gal, co-founder of Israeli cybersecurity-monitoring company Hudson Rock, said on LinkedIn that the breach “will regrettably result in a lot of hacking, targeted phishing, and doxxing.”
Gal uploaded images of the compromised email addresses that he discovered on the dark web on his LinkedIn profile, calling the incident “one of the most major dumps I’ve seen.”
According to Gal, “this information will be utilized by hackers, political hacktivists, and of course governments to undermine our privacy even further.”
Gal initially discussed the news on social media on December 24, but since then, neither Twitter nor enquiries regarding the breach have received any comments.
What steps, if any, Twitter has done to look into or fix the problem are unclear.
Online users have been sharing screenshots of the hacker forum where the information first surfaced on Wednesday.
The identity or location of the hacker or hackers responsible for the intrusion was unknown. Before Elon Musk acquired control of the business last year, in 2021, that may have happened.
At first, there were conflicting reports on the magnitude and breadth of the breach, with early reports in December claiming that 400 million email addresses and phone numbers were taken.
Cybercriminals may send emails or texts purporting to be from well-known firms as a method known as phishing. These communications request sensitive data such as passwords, credit card numbers, and other private information from their recipients.
Doxxing is the act of maliciously publishing a person’s address or other sensitive information online without that person’s permission.
After seeing the exposed data, Troy Hunt, the founder of the breach notification website Have I Been Pwned, said on Twitter that it seemed to be “very much what it’s been characterized as.”
Regulators on both sides of the Atlantic may be interested in a significant Twitter breach.
Twitter is being watched for compliance with European data protection laws and a US consent order by the Data Protection Commission in Ireland, where the company’s European headquarters are located, and by the US Federal Trade Commission.
Cybercriminals hijacked The Baltimore Sun’s official Twitter account in November, after which they posted multiple offensive tweets.
»Hackers reportedly revealed 235 million Twitter users’ email addresses«