X (Twitter) Allegedly Breached by Threat Actor

A threat actor claims to have breached the internal systems of X (formerly Twitter), the prominent American social media and microblogging service. Evidence of the intrusion was posted online in the form of screenshots that appear to show access to an internal agent dashboard.

The images display an “Agent Sign-On Dashboard” and features related to “X Internal SSO Login,” which are connected to Okta, a widely used identity and access management provider. The screenshots show functionality for manual user recovery and agent sign-in details, suggesting a compromise of a sensitive internal tool used for managing user and employee access. The actor also made a post suggesting the initial point of entry may have been related to the professional networking site LinkedIn.

According to the actor, more data will be leaked pending social media engagement on their post. The full extent of the data compromise is not yet clear. However, the screenshots indicate access to sensitive internal systems that manage employee and user identities. The allegedly compromised data could include:

• Internal employee credentials
• User account information
• Access to sensitive administrative tools
• Personal information tied to employee and user accounts