Twitter (200M) Data Breach

What happened

In early 2023, over 200M records scraped from Twitter appeared on a popular hacking forum. The data was obtained sometime in 2021 by abusing an API that enabled email addresses to be resolved to Twitter profiles. The subsequent results were then composed into a corpus of data containing email addresses alongside public Twitter profile information including names, usernames and follower counts.

Exposed data

Recommended actions

• Watch for targeted phishing emails referencing Twitter (200M) — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.