Twitter to All Users: Change Your Password Now!
Summary: Twitter asked all 300+ million users to reset their passwords after a bug stored passwords in plain text in an internal log, before they completed the hashing process normally done with bcrypt. CTO Parag Agrawal said the company found the error itself, removed the passwords, fixed the bug, and has no indication of a breach or misuse.
What you should know: Passwords were written to an internal log unmasked, and the source notes the company has not said how long they were exposed or whether those logs reached systems like Splunk or backups - so anyone reusing that password elsewhere is exposed regardless of two-factor authentication on Twitter.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026