> Twitter users for $30,000. The data included publicly available information like Twitter IDs, names, login names, locations, and verified status, as well as private information like email addresses and phone numbers.

Regardless of this data breach, phone number login / verification or SMS 2FA is an absolutely stupid idea. I have said this before [0] and it appears that with the resurfacing of this old data breach, it turns out that it exposes users to even more SS7 attacks and SIM swapping attacks.

In general, anything that violates the user's privacy from Twitter to TikTok especially a breach of user data should be fined by the regulators on the basis of the total number of users signed up. Hundreds of millions of dollars in fines for Twitter and for larger networks; it should be a fine in the billions of dollars.

[0] https://news.ycombinator.com/item?id=32364674