Twilio recently suffered a data breach exposing 33 million phone numbers linked to Authy. The hackers behind the leak, ShinyHunters, posted the information on BreachForums. Authy account IDs and non-personal data were also included in the leak. Twilio confirmed the breach but assured no access to sensitive data occurred. However, they advised users to update their security measures due to possible phishing attacks. This incident serves as a cautionary tale for users to be vigilant with text messages. Eduard Kovacs, a SecurityWeek editor, provides insights on the breach. Twilio has taken steps to secure the endpoint and prevent unauthenticated requests.
https://www.securityweek.com/twilio-confirms-data-breach-after-hackers-leak-33m-authy-user-phone-numbers/