Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Tweet from Chad Loder: "BREAKING: I have just received evidence of a massive Twitter data breach affecting millions of Twitter accounts in EU and US. I have contacted a sample of the affected accounts and they confirmed that the breached data is accurate. This breach occurred no earlier than 2021. This Twitter data breach has not been reported before. Any Twitter account with "Let others find you by your phone" enabled in Discoverability settings is affected. All accounts for the entire country code of France (+33) are listed in the dataset with their mobile numbers."

Download link

Tweet from Chad Loder: "BREAKING: I have just received evidence of a massive Twitter data breach affecting millions of Twitter accounts in EU and US. I have contacted a sample of the affected accounts and they confirmed that the breached data is accurate. This breach occurred no earlier than 2021. This Twitter data breach has not been reported before. Any Twitter account with "Let others find you by your phone" enabled in Discoverability settings is affected. All accounts for the entire country code of France (+33) are listed in the dataset with their mobile numbers."
https://media.infosec.exchange/infosecmedia/media_attachments/files/109/400/596/300/545/254/original/957fcbd8868e6c05.png

Notices where this attachment appears

Embed this notice
Marcus Hutchins :verified: (malwaretech@infosec.exchange)'s status on Friday, 25-Nov-2022 14:53:44 JST Marcus Hutchins :verified:

I'm skeptical to call stuff like this a data breach. If you enable the setting to allow people to find your account via your email or phone number, then people can find your account via your email or phone number. Yes, ideally the platform should prevent simply bruteforcing random email addresses and phone numbers to correlate them to accounts, but this is expected behavior. With enough resources you can always perform such correlations regardless.

In conversation Friday, 25-Nov-2022 14:53:44 JST from infosec.exchange permalink