As of today, SOMI makes it possible for consumers to check via the SOMI app whether they have become a victim of the Twitter data breach from January 2023. This particular leak contains email addresses from 200 million Twitter accounts which was found on the Dark Web.

From June 2021 until January 2022, there was a vulnerability on Twitter's API that allowed attackers to submit email addresses to find out which Twitter account it belongs to. Because of this security flaw, the attackers managed to scrape those data from the platform and distribute it on underground hacker sites.

According to WIRED, while the vulnerability didn't allow hackers to access passwords or other sensitive data, it did expose the connection between Twitter accounts and the email addresses linked to them, potentially exposing the identity of anonymous users. Moreover, this creates the risk of phishing attacks, identity theft, individual targeting and other social engineering attacks.

Twitter acknowledged this issue in August 2022, saying that they discovered the vulnerability back in January and that they have fixed it since. At that time, Twitter claimed that they had no evidence to suggest someone had taken advantage of the vulnerability. Later on, they learned that the breached data had been put up for sale on the Dark Web.

This breach is not the only security issue on Twitter, which has long struggled to protect its users’ data. The platform is currently being investigated by the Data Protection Commission in Ireland for this breach. In January 2019, Twitter was fined for failure to report its 2018 breach to the relevant data protection authority. 

SOMI is following this case closely and we are determined to find out whether there is any information regarding the leak that Twitter failed to reveal, and the possible negative impact this has had on its users.