Dec 27, 2022
By: Sourabh Jain
Credit: Canva
A malicious actor by the username “Ryushi” has claimed that he possesses data of over 400 million Twitter users.
Credit: Canva
The hacker has reportedly used a now-fixed API vulnerability to hack the data. The same vulnerability was earlier used to access data of over 5.4 million Twitter users.
Credit: Canva
Ryushi has posted on a hacking forum, offering to sell the data to Twitter or other people willing to pay.
Credit: Canva
The hacker has offered to sell the data to a single buyer willing to shell out $200,000 or multiple buyers offering to pay $60,000 each.
Credit: Canva
The hacker has threatened that if Twitter does not buy the data itself, it may have to pay a fine under EU’s General Data Protection Regulation (GDPR) privacy laws.
Credit: Canva
As a sample, the hacker has revealed some data of 37 celebrities such as Mark Cuban, Kevin O’Leary, Donald Trump JR and others.
Credit: Wikipedia
As part of a larger sample, data of 1,000 users has been revealed by the hacker.
Credit: Canva
The data leaked includes the user’s name, Twitter username, follower count, creation data, phone number and email address.
Credit: Canva
The hacker has also revealed that he approached Twitter in an attempt to sell the data back, but the social media platform did not respond to the hacker.
Credit: Canva