Twilio
Disclosed Aug 7, 20224 years agoConfirmed
SMS phishing of employees gives 0ktapus hackers access to Twilio customer data
Twilio said attackers used text-message phishing to steal employee credentials and accessed data of a limited number of customer accounts; it later put the count at 209 customers and disclosed a separate June 2022 incident by the same group.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Aug 7, 2022 |
| Discovered | Aug 4, 2022 |
| Attack | Phishing |
| Data exposed | Names, Emails, Phone numbers, Other |
| Sector | Telecom · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Twilio hack investigation reveals second breach, as the number of affected customers risestechcrunch.com · News | News |
| Incident Report: Employee and Customer Account Compromisetwilio.com · The organization | The organization |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Aug 7, 2022 |
Other breaches at Twilio
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Unauthenticated Authy endpoint let attackers enumerate 33 million phone numbersJul 1, 20242 years agoScrapingUnverified | Jul 1, 20242 years ago | Scraping | Tech | Unverified | Unknown |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.