Cyber Attacks/Data Breaches
Twitter: The data of 400 million Twitter users is on sale for $200,000
On the Breached hacking forum, a site frequently used to sell user data stolen in data breaches, a threat actor whose name is “Ryushi” is offering to sell the alleged data dump.
Using a vulnerability, the threat actor claimed to have gathered the personal information of more than 400 million distinct Twitter users. They advised Twitter and Elon Musk to purchase the data before they face a significant fine under the GDPR privacy law in Europe.
Ryushi wrote in a forum post, “Twitter or Elon Musk, if you are reading this, you are already risking a GDPR fine over 5.4 million breach imaging the fine of 400 million users breach source.”
“Buying this data exclusively is your best option to avoid paying $276 million USD in GDPR breach fines like Facebook did due to the scraping of 533 million users.”
Additionally, the threat actor provided a link to a post that explained how other threat actors could use this data for phishing, crypto scam, and BEC attacks.
The forum post contains sample data for 37 famous people, politicians, journalists, businesses, and government agencies, including Piers Morgan, Mark Cuba, Alexandria Ocasio-Cortez, and Donald Trump Jr. Additionally, a larger sample of 1,000 Twitter user profiles was leaked in the following days.
Twitter users’ names, email addresses, usernames, number of followers, creation date, and phone numbers are all contained in the user profiles. Although many of the leaked profiles lack phone numbers, all of them appear to have email addresses.
Phone numbers and email addresses, on the other hand, are private information, despite the fact that almost all of this data is accessible to any Twitter user.
According to the threat actor Ryushi, they are attempting to sell the Twitter data to a single individual for $200,000 and will then delete it,They will sell copies to multiple people for $60,000 per sale if no exclusive purchase is made.