Breach exposure

Public breaches involving X (Twitter)

Cross-matched against the WhatTerms breach catalog. Each entry links the breach disclosure, names the data classes confirmed exposed, and matches each class to a concrete recovery action — not just “your email was leaked”.

Recovery actions

Sorted by severity. Each action maps to one or more data classes confirmed exposed across the breaches below.

Treat SMS 2FA on this number as compromised. Move to TOTP or hardware keys; consider a relay number.
High
Phone numbers feed SIM-swap attacks and SMS phishing.
Switch this service to a per-service email alias and treat the leaked address as compromised.
Medium
Exposed emails feed phishing campaigns and credential-stuffing lists.
Audit accounts where you reuse this handle; assume it can be cross-correlated.
Medium
Handle reuse links pseudonymous accounts back to your real identity.

X (formerly Twitter)

Disclosed 2022-12-23 · 5.4M accounts

API vulnerability allowed attackers to map phone numbers and emails to anonymous handles.

Data classes exposed

Email address
Phone number
Username / handle

Source: Same dataset as the 2022 Twitter incident, redomained under x.com for stack-matching. Read disclosure ↗