Trove also included data stolen from a 2023 breach.
The data of around three billion X users has been exposed.
Threat actor "ThinkingOne" claimed the information was stolen by a former employee amid widespread layoffs at the U.S. social media firm, reports Hackread.
Whilst X had previously regarded the incident two years ago as having included publicly available information, information leaked by ThinkingOne in this incident included account creation dates, user IDs and screen names, profile descriptions and URLs, location and time zone settings, but also data stolen from a 2023 breach, such as email addresses.
Written by
Dan Raywood is a B2B journalist with 25 years of experience, including covering cybersecurity for the past 17 years. He has extensively covered topics from Advanced Persistent Threats and nation-state hackers to major data breaches and regulatory changes.
He has spoken at events including 44CON, Infosecurity Europe, RANT Forum, BSides Scotland, Steelcon and the National Cyber Security Show, and served as editor of SC Media UK, Infosecurity Magazine and IT Security Guru. He was also an analyst with 451 Research and a product marketing lead at Tenable.