Overview

• A dataset of 201 million X user records, including metadata and email addresses, was leaked by a hacker named ThinkingOne and verified by SafetyDetectives.
• The breach is linked to a larger dataset of 2.8 billion records leaked earlier in January 2025, potentially stemming from a 2022 vulnerability in X's systems.
• The leaked information does not include passwords but raises concerns about phishing and social engineering risks for affected users.
• ThinkingOne claims to have contacted X about the breach but received no response, and X has yet to acknowledge or address the incident publicly.
• The breach underscores ongoing security challenges for X, now owned by Elon Musk's xAI, and highlights broader concerns about data protection on social media platforms.