Twitter Says Many Leaked Passwords Inaccurate, Duplicates

Many of the Twitter logins and passwords leaked on the web this week are either inaccurate or belong to accounts already suspended for spamming, the company said late Tuesday.

The logins and passwords were published Monday on Pastebin, a website intended for programmers to share code but favored by hackers to release stolen data. The data was published on five separate posts on Pastebin, comprising a total of 58,978 login and password combinations.

“We’ve discovered that the list of alleged accounts and passwords found on Pastebin consists of more than 20,000 duplicates, many spam accounts that have already been suspended and many login credentials that do not appear to be linked,” Twitter said via email. “The password and username are not actually associated with each other.”

Some users will be asked to reset their passwords, while other users who are worried their data may be compromised are encouraged to change their passwords, the spokesman said.

The data was posted by an anonymous Pastebin user. As of Tuesday evening, the first page of the information had more than 40,000 views, according to a counter.

Send news tips and comments to jeremy_kirk@idg.com