Twitter security lapse exposed advertisers’ billing information

Twitter says security lapse exposed some advertising partners’ billing information including partial credit card numbers

  • The security lapse affected Twitter business partners
  • Billing information was being stored in browser caches
  • That data includes partial credit card numbers, emails, and more
  • It’s unclear how many partners were affected by the lapse 

Twitter is notifying some of its business partners, including companies advertising through the site, that it exposed sensitive billing information.

According to TechCrunch Twitter started to notify customers that billing information was being stored in the browser cache which may have been viewable by people at shared computers.

Twitter exposed some of its business partners’ billing information by storing data in browser caches according to a report from TechCrunch (Stock photo)

TechCrunch says that email addresses, phone numbers, and the last four-digits of credit card number associated with some businesses accounts may have been viewed.

The platform reportedly became aware of the bug on May 20, which is a month after a user data breach was found to have been storing private data like direct messages in Firefox’s browser cache. 

‘We’re very sorry this happened. We recognize and appreciate the trust you place in us, and are committed to earning that trust every day,’ said Twitter in a statement disclosing the breach. 

In a statement to TechCrunch, Twitter confirmed the security lapse but didn’t elaborate on how many people were affected

‘We became aware of an incident where if you viewed your billing information on ads.twitter.com or analytics.twitter.com the billing information may have been stored in the browser’s cache,’ the spokesperson said. 

‘As soon as we discovered this was happening, we resolved the issue and communicated to potentially impacted clients to make sure they were aware and informed on how to protect themselves moving forward.’