itb-nz logo
Story image

Twitter suspects state-sponsored ties to support forum breach

19 Dec 2018

One of Twitter’s support forums was hit by a data breach that may have ties to a state-sponsored attack, however users' personal data was exposed.

The support forum is dedicated to account holders who are having issues with their account and need to contact Twitter.

Twitter began working on a fix for the breach on November 15 and was promptly fixed by November 16. The breach allowed the attackers to discover the country code of Twitter users’ phone numbers - if a number was associated with their account.  

Attackers could also find out if users’ accounts had been locked by Twitter. Twitter does this when an account appears to violate the company’s rules or terms of service.

“Importantly, this issue did not expose full phone numbers or any other personal data. We have directly informed the people we identified as being affected. We are providing this broader notice as it is possible that other account holders we cannot identify were potentially impacted,” Twitter states.

The company also says it has been investigating where the attack came from and its background so users are well informed.

“During our investigation, we noticed some unusual activity involving the affected customer support form API. Specifically, we observed a large number of inquiries coming from individual IP addresses located in China and Saudi Arabia. While we cannot confirm intent or attribution for certain, it is possible that some of these IP addresses may have ties to state-sponsored actors.”

The company says it remains committed to full transparency and it has notified law enforcement about its research. Its biannual Twitter Transparency Report published trends in a number of areas, including platform manipulation, information requests, email privacy, and removal requests.

“No action is required by account holders and we have resolved the issue,” Twitter writes.

The company has also set up a data protection inquiry form for users who have questions or concerns. The form provides a secure form for users to contact Twitter’s data protection officer, Damien Kieran. 

This is not the first time Twitter has been caught up in a data breach – although most of them were its own fault.

In May 2018, a bug exposed Twitter users’ passwords that were stored in plain text in an internal log. The company encouraged all Twitter users to change their passwords.

“Due to a bug, passwords were written to an internal log before completing the hashing process. We found this error ourselves, removed the passwords, and are implementing plans to prevent this bug from happening again,” CTO Parag Agrawal wrote in May. 

Just four months later, Twitter’s Account Activity API allowed third party developers to accidentally expose user activity data including direct messages and protected tweets. The bug affected less than 1% of Twitter users, however it remained at large for more than a year from May 2017 to September 2018.

Twitter apologises for the latest breach.

“We recognise and appreciate the trust you place in us, and are committed to earning that trust every day. We are sorry this happened.”

Story image
NAKIVO launches new backup functionality for Office 365 & Oracle RMAN
Two latest releases introduce new features to NAKIVO Backup & Replication: reliable backup and recovery for Oracle databases and Office 365 application data.More
Story image
Google Cloud’s 2019 partner award winners
As Google Cloud continues to grow, here are the locally operating partners who are making strides with GCloud sales and services.More
Link image
Need better security now your workforce is remote? Get it for free
Remote working comes with all kinds of cybersecurity risks. Protect your business by leveraging multi-factor authentication, biometrics and push notification software for free.More
Story image
Google Cloud launches COVID-19 rapid response programme
The Rapid Response Virtual Agent tool streamlines customer interaction with its Contact Center AI, which provides a ‘first line of response’ through conversational self-service support via chat or over the phone.More
Story image
COVID-19: Telco cloud revenue from 5G to drop by 25%
Telco cloud revenue from 5G core deployments will fall between 20%-30% short of the forecasted US$9 billion in 2020. The investment shortfall in modernising telco networks may be somewhere in the range of US$2 to US$3 billion in the short term.More
Link image
Kubernetes Explained! New Video - how it works and business benefits
With the rapid growth in multi-cloud use internationally, watch this video to find out why Kubernetes is becoming vital to New Zealand businesses, brought to Aotearoa by home-grown Catalyst Cloud.More