A threat actor has posted an announcement on a hacker forum claiming they have obtained data of 400 million Twitter users and are attempting to sell it.
The seller, who goes online as “Ryushi,” claims the data was scraped through a vulnerability, and includes emails and phone numbers of celebrities, politicians, companies, users, and a lot of OG and special usernames.
As proof of their claims Ryushi provided a sample of 1,000 accounts which included the private information of prominent users such as Donald Trump JR, independent cybersecurity journalist Brian Krebs, Ethereum cryptocurrency founder Vitalik Buterin, and others. The posting is also offering social media CEO Elon Musk to buy the data set for an unspecified price.
Last week, the Irish Data Protection Commission (DPC) launched an investigation into Twitter over the August 2022 data breach that has reportedly impacted 5.4 million Twitter users. The data was obtained through the exploitation of an API vulnerability that Twitter had fixed in January.