Home / Incidents / Data breach
Hackers confirm 33 million Authy phone numbers
An unsecured API let ShinyHunters confirm 33 million phone numbers registered with Twilio's Authy 2FA app.
- Organisation
- Twilio (Authy)
- Disclosed
- 2 July 2024
- Affected
- 33,000,000
- Data
- Phone numbers
- Attacker
- ShinyHunters
- Severity
- major
- Region
- Global
- Source
- BleepingComputer ↗
Cite this
Nuffield Consulting, “Hackers confirm 33 million Authy phone numbers”, The Daily Tech Wire outage & breach log, 2 Jul 2024. https://techwire.nuffieldconsulting.com/incidents/2024-07-02-twilio-authy-breach/ (retrieved 15 Nov 2026).
This entry summarises public reporting. Please also cite the original source: BleepingComputer, https://www.bleepingcomputer.com/news/security/hackers-abused-api-to-verify-millions-of-authy-mfa-phone-numbers/.
Related incidents
- 18 Jul 2024$230m stolen from Indian crypto exchange WazirXWazirX · breach · Lazarus (North Korea)
- 12 Jul 2024AT&T call records of nearly all customers stolenAT&T · breach · ShinyHunters · 110M records
- 26 Jul 2024Debt collector FBCS breach reaches 4.2 millionFBCS · breach · Unknown · 4.2M records
- 15 Jul 2024RansomHub steals data on 2.2 million Rite Aid customersRite Aid · breach · RansomHub · 2.2M records
- 15 Jul 20241TB of Disney internal Slack leakedDisney · breach · NullBulge