The social media giant revealed in August that a vulnerability patched in January was exploited to obtain user data before a fix was rolled out. The admission came following reports that the flaw had been exploited to collect data on 5.4 million users.
The vulnerability was introduced in June 2021 and it allowed hackers to determine whether a specific phone number or email address was tied to an existing Twitter account, even for accounts where this information should have been private.
