Twitter Calls No Evidence Account Data Sold Online Derives from a System Vulnerability

Twitter makes no data leaks. (photo: Twitter @twittersupport)

JAKARTA - Twitter Inc stated on Wednesday January 11 that there is no evidence that the data recently sold online was obtained by exploiting vulnerabilities in their company's systems.

Twitter said data from 5.4 million accounts had been compromised by a bug it discovered early last year, which was previously patched and disclosed over the summer.

"Another 600 million pieces of user data cannot be correlated with previously reported incidents, or with any new incidents," Twitter said in a blog post.

"There is no evidence that the data sold online was obtained by exploiting a vulnerability in Twitter's systems. The data is likely a collection of data already publicly available online through various sources," Twitter said in a statement.

The social media company told users in August last year that a system vulnerability revealed users' Twitter accounts by submitting their email addresses or phone numbers, after the company learned about it through a bug bounty program months earlier.

In December, media reports claimed that someone was able to gain access to more than 400 million Twitter-related user emails and phone numbers, and that the data had been exposed through the same vulnerability discovered in January 2022.