Disclosed Jan 5, 20233 years ago211,524,284 accountsUnverified
Scraped emails and profiles of over 200 million Twitter users posted online
In early January 2023 a dataset of more than 200 million Twitter records was posted on a hacking forum. The data, compiled in 2021 by abusing an API flaw that resolved email addresses to profiles, paired emails with names, usernames and follower counts; the count is as claimed and deduplicated by researchers.
What is known
| People affected | 211,524,284 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Jan 5, 2023 |
| Happened | Jan 1, 2021 |
| Attack | Scraping |
| Data exposed | Emails, Names |
| Sector | Tech · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Twitter (200M)haveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Jan 5, 2023 | 211,524,284 |
| Researchtotal | Jan 5, 2023 |
Other breaches at Twitter
| Breach | Affected | ||||
|---|---|---|---|---|---|
| API flaw let attacker link emails and phone numbers to Twitter accountsAug 5, 20224 years agoHacking | Aug 5, 20224 years ago | Hacking | Media | Confirmed | 6.7Macct |
| Protected tweets bug notified late; Irish DPC fine of EUR 450,000Dec 15, 20205 years agoExposed data | Dec 15, 20205 years ago | Exposed data | Tech | Settled | Unknown |
| Phone spear phishing gives attackers internal tools, 130 accounts targetedJul 15, 20206 years agoPhishing | Jul 15, 20206 years ago | Phishing | Tech | Confirmed | 130 |
| Hackers gained admin control of Twitter twice in 2009; FTC security orderJun 24, 201016 years agoHacking | Jun 24, 201016 years ago | Hacking | Tech | Settled | Unknown |
History of this record
- 2026-09-25 · source_type: aggregator to press · seed source
- 2026-09-25 · country: empty to US · seed source
- 2026-09-25 · summary: In early 2023, over 200M records scraped from Twitter appeared on a popular hacking forum . The data was obtained sometime in 2021 by abusing an API that enabled email addresses to be resolved to Twitter profiles. The subsequent results wer to In early January 2023 a dataset of more than 200 million Twitter records was posted on a hacking forum. The data, compiled in 2021 by abusing an API flaw that resolved email addresses to profiles, paired emails with names, usernames and fol · seed source
- 2026-09-25 · title: empty to Scraped emails and profiles of over 200 million Twitter users posted online · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.