Breachesby GlyphDisclosed Jan 5, 2023211,524,284 accountsUnverified
Scraped emails and profiles of over 200 million Twitter users posted online
In early January 2023 a dataset of more than 200 million Twitter records was posted on a hacking forum. The data, compiled in 2021 by abusing an API flaw that resolved email addresses to profiles, paired emails with names, usernames and follower counts; the count is as claimed and deduplicated by researchers.
What is known
| People affected | 211,524,284 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Jan 5, 2023 |
| Happened | Jan 1, 2021 |
| Attack | Scraping |
| Data exposed | EmailsNames |
| Sector | Tech · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
Notices filed
Other breaches at Twitter
API flaw let attacker link emails and phone numbers to Twitter accountsHacking exposed emails, location data, names and phone numbers.Hacking6.7M accountsMediaUSAug 5, 2022Protected tweets bug notified late; Irish DPC fine of EUR 450,000Exposed data exposed messages.Exposed dataTechUSDec 15, 2020Phone spear phishing gives attackers internal tools, 130 accounts targetedPhishing exposed messages.Phishing130 affectedTechUSJul 15, 2020Hackers gained admin control of Twitter twice in 2009; FTC security orderHacking exposed credentials and tokens and messages.HackingTechUSJun 24, 2010
History of this record
aggregator to pressby seedSource
empty to USby seedSource
In early 2023, over 200M records scraped from Twitter appeared on a popular hacking forum . The data was obtained sometime in 2021 by abusing an API that enabled email addresses to be resolved to Twitter profiles. The subsequent results wer to In early January 2023 a dataset of more than 200 million Twitter records was posted on a hacking forum. The data, compiled in 2021 by abusing an API flaw that resolved email addresses to profiles, paired emails with names, usernames and folby seedSource
empty to Scraped emails and profiles of over 200 million Twitter users posted onlineby seedSource
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.