Hackers reportedly steal email addresses of over 200 million Twitter users

Hackers stole the email
addresses of more than 200 million Twitter users and posted them
on an online hacking forum, a security researcher has said.

The breach “will, unfortunately, lead to a lot of hacking,
targeted phishing and doxxing,” Alon Gal, co-founder of Israeli
cybersecurity-monitoring firm Hudson Rock, wrote on LinkedIn on Wednesday.

He
called it “one of the most significant leaks I’ve seen.”

Twitter has not commented on the report, which Gal first
posted about on social media on December 24, nor responded to
inquiries about the breach since that date.

It was not clear
what action, if any, Twitter had taken to investigate or
remediate the issue.

Screenshots of the hacker
forum, where the data appeared on Wednesday, have circulated
online.

Troy Hunt, creator of breach-notification site Have I Been
Pwned, viewed the leaked data and said on Twitter that it seemed “pretty much what it’s been described as.”

READ MORE: New Twitter rules allow scammers to have a field day

Size and scope of breach

There were no clues to the identity or location of the
hacker or hackers behind the breach.

It may have taken place as
early as 2021, which was before Elon Musk took over ownership of
the company last year.

Claims about the size and scope of the breach initially
varied, with early accounts in December saying 400 million email
addresses and phone numbers were stolen.

A major breach at Twitter may interest regulators on both
sides of the Atlantic.

The Data Protection Commission in
Ireland, where Twitter has its European headquarters, and the
US Federal Trade Commission have been monitoring the Elon
Musk-owned company for compliance with European data protection
rules and a US consent order respectively.

READ MORE: Thousands of Twitter users face outages worldwide