2024 Twilio Authy — 33M phone numbers
Data compromised
Phone numbers linked to Authy accounts
Technical writeup
Twilio's Authy two-factor authentication app was breached, exposing phone numbers linked to 33 million accounts. The breach was caused by an unauthenticated API endpoint that allowed data enumeration.
Root cause
Credential stuffing; unauthenticated API