Back to X (Twitter)

X (Twitter)Data Breach

majorAnti-PrivacyData Breach

Executive Summary

A massive dataset containing 2.8 billion user profile records was published online, believed to originate from a disgruntled insider or contractor. The data was cross-referenced with the 200 million email addresses leaked on BreachForums in January 2023, enabling deanonymization of pseudonymous accounts at unprecedented scale. X did not publicly acknowledge the leak.

What Happened

On March 28, 2025, a dataset containing 2.8 billion user profile records from X (formerly Twitter) was published online, reportedly by a disgruntled insider or contractor. The leaked data was combined with 200 million email addresses previously leaked on BreachForums in January 2023, allowing pseudonymous accounts to be linked to real identities. X did not publicly acknowledge the leak.

Who Is Affected

The breach affects X users whose profile data was included in the 2.8 billion records, with particular risk to those who operated pseudonymous accounts that can now be deanonymized through cross-referencing with the previously leaked email addresses. The scale suggests a substantial portion of X's user base may be impacted.

Why It Matters

This incident represents one of the largest known social media data breaches by record count and demonstrates how multiple datasets can be combined to break user anonymity at unprecedented scale. The apparent insider origin and lack of public acknowledgment from X raise concerns about both internal security controls and corporate transparency when user privacy is compromised.

What You Should Do

If you maintain a pseudonymous X account, assume your identity may now be linked to your real name and email address. Review your X privacy settings and consider whether sensitive posts or connections should be deleted. Change your password and enable two-factor authentication if you have not already done so, and monitor for phishing attempts or harassment that may result from the exposed data.

AI-Assisted

Event summaries are generated by Claude AI from verified sources and reviewed by humans before publication.

A massive dataset containing 2.8 billion user profile records was published... — X (Twitter) | PrivacyWire