<a href="https://www.wionews.com/entertainment/roger-federer-asks-for-recommendation-of-bollywood-films-twitter-sends-him-arbaaz-khan-movie-titles-253399">Twitter</a>&nbsp;said on Monday that it had discovered attempts by possible&nbsp;state&nbsp;actors&nbsp;to access the&nbsp;phone&nbsp;numbers&nbsp;associated with user accounts after a security researcher unearthed a flaw in the company's "contacts upload" feature.

In a&nbsp;statement published on its privacy blog,&nbsp;Twitter&nbsp;said it had identified a "high volume of requests" to use the feature coming from IP addresses in Iran, Israel, and Malaysia. It said, without elaborating, that "some of these IP addresses&nbsp;may&nbsp;have&nbsp;ties to&nbsp;state-sponsored&nbsp;actors."

Read More:&nbsp;<a href="https://www.wionews.com/world/twitter-suspends-thousands-of-accounts-that-were-linked-to-saudi-arabia-269402">Twitter suspends thousands of accounts that were 'linked to Saudi Arabia'</a>

A company spokeswoman declined to say how many user&nbsp;phone&nbsp;numbers&nbsp;had been exposed, saying&nbsp;Twitter&nbsp;was unable to identify all of the accounts that&nbsp;may&nbsp;have&nbsp;been impacted.

She said&nbsp;Twitter&nbsp;suspected a possible connection to&nbsp;state-backed&nbsp;actors&nbsp;because the attackers in Iran appeared to&nbsp;have&nbsp;had unrestricted access to&nbsp;Twitter, even though the network is banned there.

Tech publication <a href="https://www.wionews.com/world/make-america-date-again-dating-app-donalddaters-leaks-data-report-171691">TechCrunch</a> reported&nbsp;on December&nbsp;24 that a security researcher, Ibrahim Balic, had managed to match 17 million&nbsp;phone&nbsp;numbers&nbsp;to specific&nbsp;Twitter&nbsp;user accounts by exploiting a flaw in the contacts feature of its Android app. TechCrunch said it was able to identify a senior Israeli politician by matching a&nbsp;phone&nbsp;number through the tool.

The feature, which allows people with a user's&nbsp;phone&nbsp;number to find and connect with that user on&nbsp;Twitter, is off by default for users in the European Union where stringent privacy rules are in place. It is switched on by default for all other users globally, the spokeswoman said.

Read More:&nbsp;<a href="https://www.wionews.com/world/us-space-force-unveils-camouflage-uniform-gets-trolled-on-twitter-275237">US Space Force unveils camouflage uniform, gets trolled on Twitter</a>

Twitter&nbsp;said in its&nbsp;statement that it has changed the feature so it no longer reveals specific account names in response to requests. It has also suspended any accounts believed to&nbsp;have&nbsp;been abusing the tool.

However, the company is not sending individual notifications to users whose&nbsp;phone&nbsp;numbers&nbsp;were&nbsp;accessed&nbsp;in the data leak, which information security experts consider a best practice.

Twitter said on Monday that it had discovered attempts by possible state actors to access the phone numbers associated with user accounts after a security researcher unearthed a flaw in the company's "contacts upload" feature.

Twitter said on Monday that it had discovered attempts by possible state actors to access the phone numbers associated with user accounts after a security researcher unearthed a flaw in the company's "contacts upload" feature. In a statement published on its privacy blog, Twitter said it had identified a "high volume of requests" to use the feature coming from IP addresses in Iran, Israel, and Malaysia. It said, without elaborating, that "some of these IP addresses may have ties to state-sponsored actors." Read More: Twitter suspends thousands of accounts that were 'linked to Saudi Arabia' A company spokeswoman declined to say how many user phone numbers had been exposed, saying Twitter was unable to identify all of the accounts that may have been impacted. She said Twitter suspected a possible connection to state-backed actors because the attackers in Iran appeared to have had unrestricted access to Twitter, even though the network is banned there. Tech publication TechCrunch reported on December 24 that a security researcher, Ibrahim Balic, had managed to match 17 million phone numbers to specific Twitter user accounts by exploiting a flaw in the contacts feature of its Android app. TechCrunch said it was able to identify a senior Israeli politician by matching a phone number through the tool. The feature, which allows people with a user's phone number to find and connect with that user on Twitter, is off by default for users in the European Union where stringent privacy rules are in place. It is switched on by default for all other users globally, the spokeswoman said. Read More: US Space Force unveils camouflage uniform, gets trolled on Twitter Twitter said in its statement that it has changed the feature so it no longer reveals specific account names in response to requests. It has also suspended any accounts believed to have been abusing the tool. However, the company is not sending individual notifications to users whose phone numbers were accessed in the data leak, which information security experts consider a best practice.

State-sponsored actors may have accessed users' phone numbers, says Twitter

users-on-twitter

Users On Twitter, News on Users On Twitter, stories on Users On Twitter, articles on Users On Twitter, Users On Twitter stories at Wion, Users On Twitter news, Users On Twitter latest news

users on-twitter

State-sponsored actors may have accessed users' phone numbers, says Twitter