Hacker Put Up for Sale a Database of 400,000,000 Twitter Users

He offered to Elon Musk to buy this database.

An unknown hacker has put up for sale a database of Twitter users, which supposedly contains the information of 400,000,000 people. This was noticed by cybercrime experts from Hudson Rock.

The dump contains email addresses and phone numbers. The attacker said that he received the data at the beginning of 2022. According to “Security Affairs” the hacker provided a sample of 1,000 accounts as proof of claims which included the private information of prominent users such as Donald Trump JR, Brian Krebs, and many more. The seller, a member of data breach forums named Ryushi, claims the data was scraped via a vulnerability.

The attacker offered Elon Musk to buy the database in order to avoid paying a fine due to violations of the GDPR.

Twitter or Elon Musk if you are reading this you are already risking a GDPR fine over 5.4m breach imaging the fine of 400m users breach source. Your best option to avoid paying $276 million USD in GDPR breach fines like Facebook did (due to 533m users being scraped) is to buy this data exclusively.

On Friday Ireland's Data Protection Commission launches an investigation against Twitter over a data breach of 5.4 million users. Data was stolen due to an API vulnerability. After this security expert Chad Loder warned that hackers may collect other millions of records using the same API.