back to article Twitter data dump: 200m+ account database now free to download

More than 200 million Twitter users' information is now available for anyone to download for free. This latest data dump, which includes account names, handles, creation dates, follower counts, and email addresses, turns out to the be same — albeit cleaned up — leak reported last month that affected more than 400 million …

  1. Apprentice Human

    What dump?

    The URL gives 404.... is the URL correct?

    I was expecting a DDOS error, so "not found" was surprising.

    1. doublelayer Silver badge

      Re: What dump?

      I'm not sure what URL you were using. I wouldn't be surprised to hear that it's been uploaded to a bunch of places recently and that all of them will eventually take it down following complaints, so unless you were using the original leak which is probably somewhere on a Tor hidden service, you're likely to have to hunt to find the database. Remember that it's not public information, and depending on where you are, it may be illegal for you to possess it.

    2. Paul01

      Re: What dump?

      The data is still there now, I suspect your ISP is blocking the linked forum.

  2. Doctor Evil

    Uh-huh, right

    So, the breach dump file is inaccessible without first registering/logging in. All they want is a username, password (hopefully not re-used, right?), and an email address. And then you can have access to the data.

    Except ... I don't know who's behind breached.vc -- so why would I trust them? What a great way to harvest live/active email accounts, possibly with a useful password (for the lazy).

    Anyone else want to be the guinea pig here?.

    1. Anonymous Coward
      Anonymous Coward

      Re: Uh-huh, right

      Not me.

      I'm only here asking if anyone knows if its been posted elsewhere...i'll have to search 4chan

      1. FlamingDeath Silver badge

        Re: Uh-huh, right

        Why would you want to do that?

        Isnt that the place where all the cringe-lords go?

        Yuck

        1. Anonymous Coward
          Anonymous Coward

          Re: Uh-huh, right

          You're thinking of Reddit or possibly Tumblr

          1. FlamingDeath Silver badge

            Re: Uh-huh, right

            I mean sure, Reddit is up there, I've never used tumbler so cant comment

            In the case of Reddit, that site constantly harrasses me to download their smart phone app every time I visit via my phone.

            Why in hell would I want to install an application on my phone to use a flipping website.

            Answer: Data collection, selling data, etc

            A banking app I can get behind, but a forum? just no

            1. logicalextreme Silver badge

              Re: Uh-huh, right

              I found an Android app called RedReader which makes it just about possible to read Reddit threads without having to deal with that absolute asscrack of a website, no account needed. I can't deny there's some useful stuff on there.

          2. Anonymous Coward
            Anonymous Coward

            Re: Uh-huh, right

            Yeah, Reddit will have to take that hit on the chin as well, considering how much of their "content" is just 4chan reposts, but let's face it, that IS where they are getting a lot of their cringe from.

            But lets face it, this is "user generated content" right? 99% of this is our fault for posting this shit. At least with Reddit you know what you are getting into when you drop into one of the dark rabbit hole subreddits, but lets face it, the social media era internet is bad for people mental hygiene. Look at the toxic retard factory that Youtube's comment section is, and you can't even post porn on it.

            After living in this soup since the usenet/irc era, I can say I'm tired of being exposed to what most of y'all think, and I've been happier since I stopped looking. Specially since Goatse is doing rounds again. At least back in the day that was mostly in good fun, now the earth has been salted(with uranium, polonium, and more than a pinch of ethnostate nationalism. It's not fun any more, it's mostly dumb a-holes with nothing meaningful to stay that are stuck in a cycle of constant broadcast stupidity.

            I don't think you all are going to make it, and I don't want to waste much of my time watching it happen.

            And we'd all be better off if we found something more interesting to do.

    2. Lil Endian Silver badge
      Pirate

      Re: Uh-huh, right

      I was being our guinea pig. I created a throwaway email and breached[.]vc account. Then, to retrieve further content "credits" are required[1] - so that ended my lil mission.

      If anyone wants the details of the account to take up the mission, that's fine by me if it's okay with the Vultures for me to post (which I'll check first ofc!).

      NB. breached[.]vc is a site hosted by, and for, rapscallions -- so absolute distrust at all times!!!

      [1] Unfortunately not a meeellion dollars, just 8 credits, so I can't throw you a bone there, Doctor. Sorry! Please, don't release the sharks!

      1. Dave559 Silver badge

        Re: Uh-huh, right

        Wow, "rapscallion", now that's an excellent word, and a name I've not heard in a long time

        1. Lil Endian Silver badge
          Thumb Up

          Re: Uh-huh, right

          Credit goes to Vulture Simon Sharwood for rejuvenating 'rapscallions' in an article back in November.

          Awesome screenie on your link :)

      2. John Brown (no body) Silver badge

        Re: Uh-huh, right

        The BBC article quoted "forum credits" at 20p. They didn't specify if the credits are 20p each or if it's 20p worth of credits.

    3. Adam JC

      Re: Uh-huh, right

      Top tip - Use temp-mail.org for a disposal e-mail. :-)

      1. katrinab Silver badge
        Unhappy

        Re: Uh-huh, right

        I tried that. The domain wasn't white-listed apparently.

        1. Lil Endian Silver badge

          Re: Uh-huh, right

          I used proton[.]me for both email and VPN to access breached.

    4. parlei

      Re: Uh-huh, right

      https://haveibeenpwned.com/ will tell you if your email address is on the list

  3. sarusa
    Devil

    'leaked'

    Are we sure Elmo didn't just sell it? Because he absolutely would.

  4. FlamingDeath Silver badge

    I find it incredible that such pointless platforms are treated as if they’re actual institutions.

    Twitter is a website, it seems to have had some god awful API which is just another way to interface with a web host

    The platform provides nothing of significant importance.

    Why on Earth anyone would think it is worth actual money is anyones guess.

    The same applies to all other similar platforms, it’s just a website, littered with paid advertising, who cares?

    If you’re posting PII to unimportant shitcunts infrastructure, don’t be surprised when the database gets popped, it’s happened before, it will happen again, and it will keep happening, all the while money is the sole motivating driving force.

    “I Like Money” - Frito

    Lowest denominator, every time

    1. runt row raggy

      > Twitter is a website

      agreed.

      > The platform provides nothing of significant importance.

      evidently, this is not correct. twitter is daily news.

      > The same applies to all other similar platforms, it’s just a website, littered with paid advertising, who cares?

      even if we accept that twitter is insignificant, how would this follow?

      > If you’re posting PII to unimportant shitcunts infrastructure

      i feel like i've not been smart enough to replying to Rage Itself. do chill out, even though i think you're wrong, and twitter is significant, it's certainly not important enough to rage about.

      1. Anonymous Coward
        Anonymous Coward

        evidently, this is not correct. twitter is daily news.

        As in every day there's another article about how much crap is going on on twatter?

        1. Andy The Hat Silver badge

          "As in every day there's another article about how much crap is going on on twatter?"

          ... or how important Governmental and commercial business, potentially impacting and/or influencing millions or billions of individuals, is being played out on Twitter? So no, obviously not important at all ...

          1. Insert sadsack pun here Silver badge

            The importance of Twitter depends on who you are and what you use it for. If you're a generic middle-aged IT drone whose opinions are the received consensus anyway, you probably do see it as just a bunch of crap. If you're a gay guy in an oppressive environment where you'd be ostracised (at best) for being open about it, Twitter is a lifeline - and being publicly connected to that account could be terrifying.

            And that's not even mentioning various data streams and apps that rely on Twitter to spread useful info cheaply and quickly...

            1. AcceptableName

              "If you're a gay guy in an oppressive environment" with a leaked email address.

          2. Anonymous Coward
            Anonymous Coward

            So now I'm forced to use twatter just to know what my government is doing?

            As for those commercial business, they can spam me the usual way: phone calls, mail, TV/web ads...

        2. Anonymous Coward
          Anonymous Coward

          Can The Register have an auto-ban on anyone that says "Twatter"? It is absolutely bottom tier banter, and completely stale and unfunny from years of use. Alan Partridge would find it cringe.

          1. heyrick Silver badge
            Happy

            Twatter

            Sorry, but you were asking for it...

          2. Elongated Muskrat

            Ok, Twonker it is.

            (rushes off to register twonkr.com)

            1. Dave559 Silver badge

              Nah, all the cool kids are definitely on Twanger… isn't that right, Geoffrey?

          3. Elongated Muskrat

            So, what you are saying, is that you find it cringe?

            You are Alan Partridge AICMFP. Aha!

    2. heyrick Silver badge

      "Why on Earth anyone would think it is worth actual money is anyones guess."

      Well, it has a potentially active user base measured in millions, it's daily used as a replacement for actual journalism, not to mention customer support for companies that should know better, plus a place for odious twats to fart out a never ending stream of bollocks to their adoring followers.

      All those eyeballs, all that interaction, all that potential advertising revenue...

      1. FlamingDeath Silver badge

        I understand the concept, whether its a man/woman wearing an advertising board in a busy public place with lots of footfall, or whether its interjected into a steam of twats ramblings, the end result is the same.

        Did you know that most products do not even make it to market, and those that do, alot of them fail. That's a lot of waste, all aided by advertising

        You mentioned it has millions of (active) users, and while that might be true, chances are the numbers are being lied about, because of the exact reason you gave above.

        Footfall (imagined or not), is what matters to advertisers, which Twatter is, and it is nothing else, it certainly is not a news source!!

    3. Elongated Muskrat

      The point here, isn't that these are user details from twitter, but that they are identifiable information. I'm not sure what they include other than email addresses, but those are of non-zero value to the Bad Guys™.

      For instance, they could use them to mount a phishing campaign with a fake twitter log in page. For the large percentage of users who will have re-used passwords, that means they could be getting passwords that have been reused for other, more valuable online assets, such as internet banking, Paypal, Amazon, eBay, and so on. They could also be used as part of a broader attempt to fraudulently impersonate someone.

      Also, verified email addresses mean a verified attack surface for trying to hack someone's email.

  5. IGotOut Silver badge

    Got an alert...

    Firefox alerted me to the breach today.

    Not worried, haven't used it for at least 5 years and an old password that I don't use anymore

    1. Hubert Cumberdale Silver badge

      Re: Got an alert...

      You should be worried about every little piece of your puzzle that gets out. I got notified too – haven't used it in half a decade either, but I still logged back in and changed both my password and email address, just in case. The more breadcrumbs they have, the closer they can get to stealing your identity (although in my case, they may just end up paralysed by overwhelming existential dread).

    2. IGotOut Silver badge

      Re: Got an alert...

      I love how I got the thumbs down.

      For starters, it's a junk account, the same account I use for signing up for crap like forums and the like

      Next, it's not under my real name so that'll stand out a mile.

      The account gets about 20 spam mails a day.

      You see not all of us use the same account for everything, in fact I have a separate accounts for most stuff, that way it's easy to dump the unimportant stuff.

      1. Hubert Cumberdale Silver badge

        Re: Got an alert...

        You're very clever and special. Well done.

  6. I Am Spartacus
    Mushroom

    Twitter pawn my account

    I deactivated twitter. Bye Bye Elon

    1. Elongated Muskrat

      Re: Twitter pawn my account

      Elon's trying to deactivate Twitter himself, by not paying rent, suppliers, etc. etc.

      You just deactivated your account. Do you think that has done anything to the data Twitler holds about you, other than making it inaccessible to you?

  7. AcceptableName

    Twitter business plan

    1. Downsizing

    2. Series of breaches

    3. ???

    4. Profit!

    1. TangoDelta72

      Re: Twitter business plan

      This seems to be an accurate prediction.

  8. TimMaher Silver badge
    Happy

    Database cleaned up.

    It wasn’t de-duplication. It was bot removal.

  9. wolfetone Silver badge

    You can imagine my surprise when I too got an email from Firefox telling me my email was in this breach.

    Not surprised that it's been hacked, given the shit show stories we've read from the whistleblower, but the fact I deleted my account over 3 years ago and it's still in this data really does fuck me off. I've not deactivated it, it's been deleted.

    But why am I surprised that a big multinational hasn't really deleted my stuff?

    1. Elongated Muskrat

      I think people are only just now starting to realise that anything they put on the internet is essentially there forever, thanks in part to the wayback machine, but there are lots of other archives and mirrors of various bits and bobs. Usenet messages I posted in 1995 (under my actual real-life identity) are still obtainable to anyone who gives that much of a fuck about what a naïve young man thought over a quarter of a century ago.

  10. Anonymous Coward
    Anonymous Coward

    Elon's about to get torn apart thrice by the EU

    Attacking journalists, supporting hate speech AND now breaching the GDPR. What felony will he be guilty of next?

    1. I ain't Spartacus Gold badge

      Re: Elon's about to get torn apart thrice by the EU

      All of these breaches are from before he bought the company. As was much attacking journalists and hate speech on Twitter. Even if he's doing it just as much, if not more.

      Of course he's now in charge, so also gets to pay the fines for what the last management did, as well as whatever ones he brings on himself.

  11. Radio Wales
    Happy

    Twitter is not responding.

    Re Twitter.

    There was no response from them because there is nobody qualified left to reply. All public comment needs to be personally cleared by the CEO.

    Currently, there is a backlog of approx' 2,455,879 items in the queue for release.

    If Mr. CEO works 38 hours a day 'till he dies, he should be able to manage to stop it from expanding beyond control.

    Poor Mr. CEO (whoever that might be)

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like