A Twitter database containing about 235 million users has been exposed on an online hacker forum in what is shaping to be one of the biggest data leaks yet recorded, according to a cyber intelligence company.
The data dump contains users' names, e-mail addresses, screen names, number of followers and the dates of the creation of their accounts, as well as some phone numbers, Israel-based Hudson Rock said on Wednesday.
The exposure of the unique records will "unfortunately lead to a lot of hacking, targeted phishing and doxxing", it said in a tweet. Doxxing is the act of revealing actual information of an individual or organisation online.
Industry publication CyberNews was the first to report the news, which said the size of the database involved was about 63GB.
It also said the new leak was by the group that posted an advertisement on the same online forum selling the information of about 400 million Twitter users in early December. These included handles, user names, e-mails and phone numbers, with asking prices of up to $200,000.
Hudson Rock did not name the online forum that hosted Wednesday's data dump, but it has been reported that the forum that hosted the December ad was a site called Breached, which has been known to regularly post and sell stolen data.
"This is one of the most significant leaks ever," Hudson Rock said. It is also unclear if any passwords have been exposed, and the possibility of the data having been shared privately has not been ruled out.
A user replying to Hudson Rock's tweet directed a question at Twitter chief executive Elon Musk, asking whether the breach was real. Mr Musk or Twitter has yet to respond as of posting time.
The breach is the latest in a string of cybersecurity problems the microblogging platform has faced in the past year, and the second in less than a month.
If confirmed by Twitter, this would rank among the top 15 biggest data breaches yet, if it was included in the rankings of cybersecurity company UpGuard.
It will not, however, exceed a breach that Twitter suffered in 2018, which stemmed from a password bug that exposed the accounts of about 330 million users.
In August, Twitter confirmed a data breach that exposed the information of about 5.4 million of its users in July, citing a vulnerability in its software.
The hack "allowed someone to enter a phone number or e-mail address into the log-in flow in the attempt to learn if that information was tied to an existing Twitter account, and if so, which specific account", the company said at the time.
It also adds to the nagging issues at the San Francisco-based company, which has faced a tumultuous time in Mr Musk's short reign as its new owner after he bought the company for $44 billion last year.
Mr Musk's tenure at Twitter has been marred by controversial decisions, flip-flopping, and the firing of top executives and almost half of its workforce.
Technology companies, meanwhile, have been a favourite target of hackers due to their rich resources of user data that they can illicitly sell on the dark web. Industry majors such as Yahoo, LinkedIn and Facebook have all fallen victim in the past.
Data-breach costs in 2021 were estimated to have risen to $4.24 million from $3.86 million in 2020, according to the latest annual study from US technology company IBM.
That was the highest figure in the 17-year history of the report until it was surpassed in IBM's 2022 update, which showed that total breach costs were now at $4.35 million.
Labour dispute
The insured employee may still file an ILOE claim even if a labour dispute is ongoing post termination, but the insurer may suspend or reject payment, until the courts resolve the dispute, especially if the reason for termination is contested. The outcome of the labour court proceedings can directly affect eligibility.
- Abdullah Ishnaneh, Partner, BSA Law
More from Rashmee Roshan Lall
UAE currency: the story behind the money in your pockets
THE SIXTH SENSE
Starring: Bruce Willis, Toni Collette, Hayley Joel Osment
Director: M. Night Shyamalan
Rating: 5/5
The specs: 2018 Renault Koleos
Price, base: From Dh77,900
Engine: 2.5L, in-line four-cylinder
Transmission: Continuously variable transmission
Power: 170hp @ 6,000rpm
Torque: 233Nm @ 4,000rpm
Fuel economy, combined: 8.3L / 100km
BOSH!'s pantry essentials
Nutritional yeast
This is Firth's pick and an ingredient he says, "gives you an instant cheesy flavour". He advises making your own cream cheese with it or simply using it to whip up a mac and cheese or wholesome lasagne. It's available in organic and specialist grocery stores across the UAE.
Seeds
"We've got a big jar of mixed seeds in our kitchen," Theasby explains. "That's what you use to make a bolognese or pie or salad: just grab a handful of seeds and sprinkle them over the top. It's a really good way to make sure you're getting your omegas."
Umami flavours
"I could say soya sauce, but I'll say all umami-makers and have them in the same batch," says Firth. He suggests having items such as Marmite, balsamic vinegar and other general, dark, umami-tasting products in your cupboard "to make your bolognese a little bit more 'umptious'".
Onions and garlic
"If you've got them, you can cook basically anything from that base," says Theasby. "These ingredients are so prevalent in every world cuisine and if you've got them in your cupboard, then you know you've got the foundation of a really nice meal."
Your grain of choice
Whether rice, quinoa, pasta or buckwheat, Firth advises always having a stock of your favourite grains in the cupboard. "That you, you have an instant meal and all you have to do is just chuck a bit of veg in."
Meydan racecard:
6.30pm: Handicap | US$135,000 (Dirt) | 1,400 metres
7.05pm: Handicap | $135,000 (Turf) | 1,200m
7.40pm: Dubai Millennium Stakes | Group 3 | $200,000 (T) | 2,000m
8.15pm: UAE Oaks | Group 3 | $250,000 (D) | 1,900m
8.50pm: Zabeel Mile | Group 2 | $250,000 (T) | 1,600m
9.20pm: Handicap | $135,000 (T) | 1,600m
UPI facts
More than 2.2 million Indian tourists arrived in UAE in 2023
More than 3.5 million Indians reside in UAE
Indian tourists can make purchases in UAE using rupee accounts in India through QR-code-based UPI real-time payment systems
Indian residents in UAE can use their non-resident NRO and NRE accounts held in Indian banks linked to a UAE mobile number for UPI transactions
Predictions
Predicted winners for final round of games before play-offs:
- Friday: Delhi v Chennai - Chennai
- Saturday: Rajasthan v Bangalore - Bangalore
- Saturday: Hyderabad v Kolkata - Hyderabad
- Sunday: Delhi v Mumbai - Mumbai
- Sunday - Chennai v Punjab - Chennai
Final top-four (who will make play-offs): Chennai, Hyderabad, Mumbai and Bangalore
Our family matters legal consultant
Name: Hassan Mohsen Elhais
Position: legal consultant with Al Rowaad Advocates and Legal Consultants.
Biog
Mr Kandhari is legally authorised to conduct marriages in the gurdwara
He has officiated weddings of Sikhs and people of different faiths from Malaysia, Sri Lanka, Russia, the US and Canada
Father of two sons, grandfather of six
Plays golf once a week
Enjoys trying new holiday destinations with his wife and family
Walks for an hour every morning
Completed a Bachelor of Commerce degree in Loyola College, Chennai, India
2019 is a milestone because he completes 50 years in business
MATCH INFO
Europa League final
Marseille 0
Atletico Madrid 3
Greizmann (21', 49'), Gabi (89')
What the law says
Micro-retirement is not a recognised concept or employment status under Federal Decree Law No. 33 of 2021 on the Regulation of Labour Relations (as amended) (UAE Labour Law). As such, it reflects a voluntary work-life balance practice, rather than a recognised legal employment category, according to Dilini Loku, senior associate for law firm Gateley Middle East.
“Some companies may offer formal sabbatical policies or career break programmes; however, beyond such arrangements, there is no automatic right or statutory entitlement to extended breaks,” she explains.
“Any leave taken beyond statutory entitlements, such as annual leave, is typically regarded as unpaid leave in accordance with Article 33 of the UAE Labour Law. While employees may legally take unpaid leave, such requests are subject to the employer’s discretion and require approval.”
If an employee resigns to pursue micro-retirement, the employment contract is terminated, and the employer is under no legal obligation to rehire the employee in the future unless specific contractual agreements are in place (such as return-to-work arrangements), which are generally uncommon, Ms Loku adds.
DUBAI WORLD CUP RACE CARD
6.30pm Meydan Classic Trial US$100,000 (Turf) 1,400m
7.05pm Handicap $135,000 (T) 1,400m
7.40pm UAE 2000 Guineas Group Three $250,000 (Dirt) 1,600m
8.15pm Dubai Sprint Listed Handicap $175,000 (T) 1,200m
8.50pm Al Maktoum Challenge Round-2 Group Two $450,000 (D) 1,900m
9.25pm Handicap $135,000 (T) 1,800m
10pm Handicap $135,000 (T) 1,400m
The National selections
6.30pm Well Of Wisdom
7.05pm Summrghand
7.40pm Laser Show
8.15pm Angel Alexander
8.50pm Benbatl
9.25pm Art Du Val
10pm: Beyond Reason
