Twitter has contacted its business clients to warn them of a potential breach of their data.
It said that email addresses, phone numbers and the last four digits of card numbers may have been accessed by others, thanks to a technology snafu which exposed the information.
It meant that billing information viewed on ads.twitter.com or analytics.twitter.com may have been exposed in the browser’s cache.
The social network first became aware of the incident on May 20 and said it took immediate action to remediate and notify any affected customers.
The snafu is not thought to have affected consumer users of the service, according to the BBC.
This isn’t the first time something like this has happened on the social platform.
Around a month before this incident, Twitter warned users that non-public information may have been stored in their Firefox browser’s cache.
“This means that if you accessed Twitter from a shared or public computer via Mozilla Firefox and took actions like downloading your Twitter data archive or sending or receiving media via Direct Message, this information may have been stored in the browser’s cache even after you logged out of Twitter,” it said at the time.
Although it’s unclear how many businesses were affected by the May breach, experts generally agreed that incidents of this kind are likely to have a limited impact on customers’ data security and privacy.
“The vector here requires physical access to the device, so it may not be as exploitable as an alert like this might indicate,” explained Edgescan product architect, David Kennefick.
“What Twitter has done is update its headers to include no-store and no-cache, which disables storing data from a website locally.”
Tripwire senior security researcher, Craig Young, added that the incident could still provide a “teachable moment” regarding shared computers.
“Whether you regularly rely on libraries or internet cafes for access or just need to print the occasional boarding pass from a hotel lobby, there can be a risk of exposing personal data,” he argued.
“Ideally, the best solution is to simply avoid using shared computers when entering or accessing personal data but this is not always an option. The next best solution is to bring your own web browser and take it with you when you go.”
We’re Team Metalogic
We’re Team Metalogic, a managed IT support provider offering outsourced IT services to SME’s across the UK. With a proven track record, with extensive experience and a full portfolio of industry accreditations & certifications.
Our stress-free solutions don’t complicate things, in fact, they improve efficiency and save money.
News source: https://www.infosecurity-magazine.com/
Share this page
Insider attacks are skyrocketing, and so is the cost to recover from them. We’ll tell you what types of threats constitute an 'insider threat' and how to safeguard your network to lower your risk.
Salespeople spend approximately 34% of their time on administrative tasks. Microsoft has a goal to change that using Viva Sales. We’ll tell you all about this upcoming new sales application.
20% of surveyed businesses have experienced a data breach connected to a former employee. Are you properly disconnecting former staff? Learn tips for better digital off-boarding.
The holiday shopping season is in full swing. So are phishing, fake websites, and credit card scams. Learn 9 security tips for online holiday shopping before it’s too late!
We’d love to talk