"Cybercriminal Offers 5.4m Twitter Users’ Data"

A database containing 5.4m Twitter users' data is reportedly for sale on a popular criminal forum.  The seller is using the nickname "devil."  The seller advertised the stolen data on the Breached Forums site and demanded at least $30,000 for it.  The seller said that the database contains users' phone numbers and email addresses, including celebrities and companies.  The seller said they exploited a vulnerability in Twitter's systems that was first reported and fixed in January.  The vulnerability exploited was a bug that would enable an attacker with a basic knowledge of scripting/coding to find a Twitter user's phone number and email address, even if the user has hidden them in privacy settings.  Twitter is currently investigating the issue.  The data for sale was first reported by RestorePrivacy, which has also downloaded and verified the dataset. 

Infosecurity reports: "Cybercriminal Offers 5.4m Twitter Users’ Data"