Twitter Hack: Email Addresses of 200 Million Users Leaked on Hacking Forum, Security Researcher Says

The data breach at Twitter, could lead to hacking, targeted phishing, and doxxing of Twitter users, according to a security researcher.

By Reuters | Updated: 6 January 2023 10:56 IST

Highlights

Alon Gal first posted about Twitter data breach on December 24
Europe's DTC, US FTC have been monitoring Twitter for compliance
Earlier reports claimed 400 million email addresses, numbers were stolen

Twitter Hack: Email Addresses of 200 Million Users Leaked on Hacking Forum, Security Researcher Says

The Twitter data breach may have taken place as early as 2021

Photo Credit: Twitter

Hackers stole the email addresses of more than 200 million Twitter users and posted them on an online hacking forum, a security researcher said Wednesday.

The breach “will unfortunately lead to a lot of hacking, targeted phishing and doxxing,” Alon Gal, co-founder of Israeli cybersecurity-monitoring firm Hudson Rock, wrote on LinkedIn. He called it “one of the most significant leaks I've seen.”

Twitter has not commented on the report, which Gal first posted about on social media on December 24, nor responded to inquiries about the breach since that date. It was not clear what action, if any, Twitter has taken to investigate or remediate the issue.

Twitter to Expand the Types of Political Ads Allowed on Its Platform

Reuters could not independently verify the data on the forum was authentic and came from Twitter. Screenshots of the hacker forum, where the data appeared on Wednesday, have circulated online.

Troy Hunt, creator of breach-notification site Have I Been Pwned, viewed the leaked data and said on Twitter that it seemed “pretty much what it's been described as.”

There were no clues to the identity or location of the hacker or hackers behind the breach. It may have taken place as early as 2021, which was before Elon Musk took over ownership of the company last year.

Twitter to Soon Allow Users to Side Sweep Through Tweets, Trends, Topics, More

Claims about the size and scope of the breach initially varied with early accounts in December saying 400 million email addresses and phone numbers were stolen.

A major breach at Twitter may interest regulators on both sides of the Atlantic. The Data Protection Commission in Ireland, where Twitter has its European headquarters, and the US Federal Trade Commission have been monitoring the Elon Musk-owned company for compliance with European data protection rules and a US consent order respectively.

Messages left with the two regulators were not immediately returned on Thursday.

Twitter Gets Server Architecture Changes, Should Feel Faster, Says Elon Musk

Where did Realme go wrong with the 10 Pro+ 5G? We discuss this on Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.