Twitter has informed users of a security bug that had allowed “a bad actor” to obtain and sell the personal data of account holders. The tech giant didn’t provide the number of compromised accounts, but media reports state that more than 5 million users could have been affected.

A company statement said that the system vulnerability, which resulted from a June 2021 code update, made it possible to enter an email address or phone number and learn if either was linked to a specific account.

Twitter fixed the bug in early 2022. In July, however, the company saw a press report suggesting that “someone had potentially leveraged this and was offering to sell the information they had compiled.”

Source (Regency Reporters on Facebook)

I can't remember my password again....