Twitter’s API could have enabled outsiders to match users’ phone numbers to corresponding accounts and unmask anonymous users. Twitter says the flaw has now been fixed, but not before at least one large-scale effort exploited it. The problem was first reported by TechCrunch on Dec. 24, 2019. Any resulting impact on users remains unclear. Twitter has apologized for the flaw, but says it has fixed it and is focused on the safety of the privacy of the people who use the social media site.”]
Source: https://www.bankinfosecurity.com/twitter-warns-api-flaw-abuse-may-have-unmasked-users-a-13680