Concerns over potential mass leak of Twitter passwords

A hacker is claiming to have breached Twitter’s databases. Tessa88, the same alias used by the individual who is last week believed to have hacked Russian social media site, VK.com, is reportedly selling login credentials for more than 32m Twitter users for 10 Bitcoins. As with similar other breaches, the details include usernames, email addresses and plain-text passwords. Twitter has denied the claims, and said that it has not suffered a data breach. LeakedSource, a search engine that logs leaked credentials resulting from data breaches, remains skeptical and has suggested that Twitter has suffered a data leak as a result of malware.

"Tens of millions of people have become infected by malware, and the malware sent every saved username and password from browsers like Chrome and Firefox back to the hackers from all websites including Twitter," LeakedSource wrote in its blog post.

UPCOMING WEBINAR 🔐 Mastering API Security: Understanding Your True Attack Surface Discover the untapped vulnerabilities in your API ecosystem and take proactive steps towards ironclad security. Join our insightful webinar! Join the Session

The world came to know about massive data breaches in some of the most popular social media websites including LinkedIn Tumblr , Fling, and VK.com when an unknown Russian hacker published the data dumps for sale on the underground black marketplace.However, these are only data breaches that have been publicly disclosed by the hacker.I wonder how much more stolen data sets this Russian, or other hackers are holding that have yet to be released.The answer is still unknown, but the same hacker is now claiming another major data breach, this time, in Twitter.Login credentials of more than 32 Million Twitter users are now being sold on the dark web marketplace for 10 Bitcoins (over $5,800).LeakedSource, a search engine site that indexes leaked login credentials from data breaches, noted in a blog post that it received a copy of the Twitter database from Tessa88, the same alias used by the hacker who provided it hacked data from Russian social network VK.com last week.The database includes usernames, email addresses, sometimes second email addresses, and plain-text passwords for more than 32 Million Twitter accounts.Twitter strongly denied the claims by saying that "" – their "," but LeakedSource believed that the data leak was the result of malware.But, do you remember how Facebook CEO Mark Zuckerberg Twitter account was compromised?The hackers obtained Zuck's account credentials from the recent LinkedIn data breach , then broke his SHA1-hashed password string, tried on his several social media accounts and successfully hacked Zuckerberg's Twitter and Pinterest account.So, one possibility could also be that the alleged Twitter database dump of over 32 Million users is made up of already available records from the previous LinkedIn, MySpace and Tumblr data breaches The hacker might just have published already leaked data from other sites and services as a new hack against Twitter that actually never happened.Whatever the reason is, the fact remain that hackers may have had their hands on your personal data, including your online credentials.So, it's high time you changed your passwords for all social media sites as well as other online sites if you are using the same password.