Twitter informed millions of users this week that their usernames and passwords may have been exposed in a database breach.
The database in question was not maintained or operated by Twitter, but held as many as 33 million account details. Twitter says “nefarious individuals” may take advantage of the leak by testing the usernames and passwords against Twitter and other top web sites in order to gain access to online accounts.
Twitter is blocking all access to impacted accounts, forcing users to reset their passwords. Those whose accounts may be at risk should have received an email from Twitter and will need to create a new password in order to access the account.
Twitter recommends all people use two-factor authentication, strong and unique passwords, and password managers to increase account security.