Private info from December Twitter data breach leaked online

Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.

Twitter data breach overview: 

• Who: Threat actors shared the private information of more than 5.4 million Twitter users it compromised during a December 2021 data breach on a public hacking forum. 
• Why: The information, which includes phone numbers, email addresses, Twitter IDs and login names, among other things, had previously been put up for sale in July on a hacking forum. 
• Where: The data breach obtained the private information of users nationwide.

Hackers shared the private information of more than 5.4 million Twitter users that it compromised during a December data breach for free on a public hacking forum. 

The threat actors stole private phone numbers, email addresses and scraped details such as Twitter IDs and login names that were not meant to be seen by the public, BleepingComputer reports. 

They previously put the private information up for sale on a hacking forum in July, reportedly asking for $30,000.

The threat actors took advantage of a Twitter API vulnerability uploaded to the HackerOne bug bounty program, BleepingComputer reports. The vulnerability reportedly allowed individuals to retrieve Twitter IDs by submitting associated email addresses and phone numbers into the API. 

Twitter data breach confirmed, reportedly fixed

Twitter ultimately confirmed that it suffered a data breach due to the API vulnerability, which the company says it fixed this past January, BleepingComputer reports. 

The threat actors also reportedly accessed an additional 1.4 million Twitter profiles that belonged to users who had been suspended from the platform by taking advantage of a different API vulnerability. 

The hackers released the information from this Twitter data breach, which brought the total number of affected accounts to more than 7 million, privately, BleepingComputer reports. 

Were you impacted by the Twitter data breach? Let us know in the comments!

Read About More Class Action Lawsuits & Class Action Settlements:

• United class action claims airline photo identification kiosks violate data privacy laws
• Coinbase wants to send hacker theft class action to arbitration
• Eagle Bank data breach compromises Social Security numbers, financial account numbers, more
• Ringless voicemails require consumer consent, FCC clarifies