A threat actor is claiming to have obtained data belonging to 400 million Twitter users and is offering it for sale. The seller, a member of data breach forums named Ryushi, has provided a sample of 1,000 accounts as proof of claims which includes the private information of prominent users such as Donald Trump Jr., Brian Krebs, and more. The seller is also inviting Twitter and Elon Musk to buy the data to avoid GDPR lawsuits.
Alon Gal, co-Founder of threat intelligence firm Hudson Rock, has reported that Twitter placed a “readers context” in which they attribute the 400 million Twitter user database to the August data leak, however, Gal has indicated that it is false and that the data is increasingly likely to be valid.
The sale is covered by the escrow service offered by the Breached forum administrators. However, at this time it is not possible to verify the claims of the seller.
The data breach is concerning as it includes emails, phone numbers, and other private information of celebrities, politicians, companies, and normal users. While the data breach is still unverified, it is important to stay vigilant and take proper measures to ensure your data is secure. Ireland’s Data Protection Commission has opened a probe into Twitter over an August data breach that has reportedly impacted 5.4 million Twitter users.