Twitter says 130 accounts targeted, 45 compromised in security breach

Twitter has confirmed that 130 accounts have been focused and 45 have been compromised in a security breach earlier this week.

In a weblog put up the corporate acknowledged:

As we have been informing by way of the @TwitterSupport account, on Wednesday, July 15, 2020, we detected a security incident at Twitter and took instant motion. As we head into the weekend, we need to present an summary of the place we’re.

Twitter says that attackers focused “certain Twitter employees through a social engineering scheme”, in the context, “the intentional manipulation of people into performing certain actions and divulging confidential information.” A latest Motherboard report claims hackers merely paid off a Twitter insider to do their work for them.

Twitter says “a small number of employees” have been efficiently manipulated, and their credentials used to achieve entry to inner methods, bypassing 2FA protections.

It says 130 accounts have been focused. 45 of these had their passwords reset, and the attackers have been capable of login to these accounts and ship rogue tweets. Tweets despatched from accounts like Apple, Barack Obama, Invoice Gates, and extra requested customers to ship Bitcoin to an deal with with the promise it might be doubled. Twitter additionally believes the attackers could have tried to promote the usernames of compromised accounts.

Extra disturbingly, Twitter says the knowledge of eight accounts was downloaded by way of ‘Your Twitter Information’:

For as much as eight of the Twitter accounts concerned, the attackers took the extra step of downloading the account’s data by way of our “Your Twitter Data” instrument. This can be a instrument that’s meant to offer an account proprietor with a abstract of their Twitter account particulars and exercise. We’re reaching out on to any account proprietor the place we all know this to be true. Not one of the eight have been verified accounts.

This consists of account historical past, apps and units, exercise, pursuits and advert information, contacts, Tweet historical past, apps with entry to your Twitter, muted and blocked accounts, profile information, Direct Messages, media, and extra.

Twitter says it’s persevering with to analyze the assault alongside regulation enforcement. Twitter reiterates that the overwhelming majority of Twitter customers weren’t affected by the incident. Of the 130 that have been, attackers weren’t capable of view earlier passwords however have been capable of see private data together with electronic mail addresses and telephone numbers. Of the 45 accounts taken over, the injury is unclear however definitely worse.

Twitter says additionally it is working to revive entry to account house owners nonetheless locked out for the reason that breach, primarily customers who’ve reset their passwords in the final 30 days.

Twitter mentioned it was “acutely aware of our responsibilities to the people” who use its service, including that it was “embarrassed”, “disappointed”, and “more than anything, we’re sorry.”

You may learn the complete report right here.