Twitter API Attack Matches Millions of Users’ Phone Numbers to Usernames

Twitter recently announced that on December 24, 2019, it became aware of a large network of fake accounts that were abusing the company’s API to match phone numbers to user’s accounts. Twitter noted that these attacks may be connected to state-sponsored actors from Iran, Israel, and Malaysia.