Breachesby GlyphDisclosed Jun 24, 2010Settled
Hackers gained admin control of Twitter twice in 2009; FTC security order
Between January and May 2009 hackers twice gained administrative control of Twitter, accessing non-public user information and private tweets and sending fake tweets. The FTC order, announced in June 2010 and finalized in March 2011, requires a security program with independent assessments for 10 years.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jun 24, 2010 |
| Discovered | 2009 |
| Attack | Hacking |
| Data exposed | Credentials and tokensMessagesOther |
| Sector | Tech · US |
| Status | Settled |
| Lawsuit or fine | FTC consent order (finalized March 2011); no monetary penalty |
Sources
Notices filed
Other breaches at Twitter
Scraped emails and profiles of over 200 million Twitter users posted onlineScraping exposed emails and names.Scraping212M accountsTechUSUnverifiedJan 5, 2023API flaw let attacker link emails and phone numbers to Twitter accountsHacking exposed emails, location data, names and phone numbers.Hacking6.7M accountsMediaUSAug 5, 2022Protected tweets bug notified late; Irish DPC fine of EUR 450,000Exposed data exposed messages.Exposed dataTechUSDec 15, 2020Phone spear phishing gives attackers internal tools, 130 accounts targetedPhishing exposed messages.Phishing130 affectedTechUSJul 15, 2020
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.