"I have just received evidence of a massive Twitter data breach affecting millions of Twitter accounts in the EU and the US. I have contacted a sample of the affected accounts and they confirmed that the breached data is accurate. This breach occurred no earlier than 2021," Loder had posted on Twitter. The data containing non-public information was stolen using a Twitter API vulnerability fix in January this year.

This data was collected in December 2021 using a Twitter API vulnerability disclosed in the HackerOne bug bounty programme, the report said on Sunday. Most of the data consisted of public information, such as Twitter IDs, names, login names, locations, and verified status. It also included private information, such as phone numbers and email addresses. Musk or Twitter were yet to comment on the report.

Poll

Who will win the Punjab Elections?

BJP 32.81%

AAP 42.19%

INC 25.00%

Submit

View All In Poll

Pompompurin, the owner of the Breached hacking forum, told BleepingComputer that "they were responsible for exploiting the bug and creating the massive dump of Twitter user records after another threat actor known as 'Devil' shared the vulnerability with them," the report mentioned. As hackers released 5.4 million records online, an even larger data dump has allegedly been created using the same vulnerability, according to the report. "We were told that it consists of over 17 million records but could not independently confirm this," said the report.

Also Read: Apple Watch may help detect silent heart disease: Study

This story has been sourced from a third party syndicated feed, agencies. Mid-day accepts no responsibility or liability for its dependability, trustworthiness, reliability and data of the text. Mid-day management/mid-day.com reserves the sole right to alter, delete or remove (without notice) the content in its absolute discretion for any reason whatsoever