Hacker put 200M customers’ personal data up for grabs

by Jeremy

200 million Twitter customers’ personal data, together with their e mail addresses, was put on the market after a breach uncovered 400M customers’ personal data within the final week of December 2022.

The hacker behind the December breach has earlier demanded $200,000 from Twitter in a bid to return the stolen knowledge and warned if the demand just isn’t fulfilled, the info might be launched without cost. The newest set of information posted on the hacker discussion board has been traced again to the identical breach from December 2022.

Researchers at Privateness Affairs confirmed that the leaked knowledge set on the hacker discussion board is identical from December. The 200 million quantity, on this case, resulted from the removing of duplicates. The launched knowledge set doesn’t include cellphone numbers. The researchers warned that these knowledge units may very well be used to provoke social engineering or “doxing” campaigns.

The information set was initially 63GB, however after eradicating duplicates and compressing the recordsdata, the scale of the newest knowledge set was diminished to 4GB and free to obtain. 

The hacker additionally famous that the evaluation of authentic file dates and account creation dates “strongly recommend” that this was collected from early November 2021 by December 14, 2021.

Associated: LastPass knowledge breach led to $53K in Bitcoin stolen, lawsuit alleges

Many customers on Twitter demanded that the social media platform appears to be like into safety as these hacks put activists and whistleblowers in peril.

A few of the in style and identified names and entities embody Sundar Pichai, Donald Trump Jr., SpaceX, CBS Media, the NBA, and the WHO. The information breach vulnerability has been patched now, however tracing again to the hack, it appears the identical vulnerability was used for an additional exploit in July 2022.