Twitter refutes that the recent data leak came from an exploit

The social media company, Twitter, has finally published a statement regarding the leaked dataset of email addresses from hundreds of millions of users. According to the social media platform, the spread and sold data online from their company was not a result of exploiting a vulnerability within their systems.

According to their investigation, no evidence pointed towards any abuse flaw resulting in data loss. The company also claimed that the Twitter system was secured upon their analysis and showed no signs of any breach.

 

Some experts believed there might be a connection between the recent Twitter issue and the data leak incident last year.

 

August last year, the social media giant confirmed that a data leak incident impacted more than five million users due to the threat actors’ exploitation of a vulnerability. The critical flaw allowed the threat actors to connect email addresses and phone numbers to the impacted Twitter users’ accounts.

The company claimed that another dataset containing email addresses of about 200 million users that reportedly got leaked online was not obtained by abusing the vulnerability patch they deployed recently. They also insisted that the 200 million datasets could not be related to the previously reported attack or any incident originating from the exploitation of Twitter systems. Fortunately, the latest leaked datasets did not include passwords or information that could lead to hackers stealing passwords.

The social media company then added that their analysis and investigation revealed no sign that the data came from abuse of their systems. Hence, the sold data on the internet is a collection of publicly available information through a different source or vendor.

Unfortunately, no Twitter representative could explain how the Twitter users’ leaked data was accurately attributed to the email addresses related to their accounts.

The social media team cooperates with the Data Protection Authorities and other data regulatory boards in numerous countries to give further details about the incidents.