Twitter has revealed more details about the July 15 attacks that saw several prominent accounts hijacked to promote a Bitcoin scam.
The updates admit “the attackers successfully manipulated a small number of employees and used their credentials to access Twitter’s internal systems, including getting through our two-factor protections.”
It continues: “As of now, we know that they accessed tools only available to our internal support teams to target 130 Twitter accounts. For 45 of those accounts, the attackers were able to initiate a password reset, login to the account, and send Tweets. We are continuing our forensic review of all of the accounts to confirm all actions that may have been taken. In addition, we believe they may have attempted to sell some of the usernames.”
Twitter isn’t sure what, but said the “attackers were able to view personal information including email addresses and phone numbers” for the 130 impacted accounts. It’s possible “additional information” may also have been viewed which means the users data was leaked.
Twitter support on Saturday confirmed that no fewer than eight Twitter accounts involved in the bitcoin scam, the attackers took the additional step of downloading the account’s information through its “Your Twitter Data” tool.
Twitter also noted that none of the eight accounts alleged to have hack its tech company were Verified accounts and the identity of the hackers will only be disclosed to the impacted accounts.
Twitter made a solidarity post saying, “We hope that our openness and transparency throughout this process, and the steps and work we will take to safeguard against other attacks in the future, will be the start of making this right.
Comments are closed.