Twilio confirms hack of Authy authentication app to TechCrunch

Twilio confirmed to TechCrunch that “threat actors” were able to identify the phone number of people who use Authy, a two-factor authentication app owned by Twilio. Twilio spokesperson Kari Ramirez told TechCrunch that the company “has detected that threat actors were able to identify data associated with Authy accounts, including phone numbers, due to an unauthenticated endpoint. We have taken action to secure this endpoint and no longer allow unauthenticated requests.” In a post on a well-known hacking forum, the hacker or hackers known as ShinyHunters wrote that they hacked Twilio and obtained the cell phone numbers of 33M users, reports TechCrunch’s Lorenzo Franceschi-Bicchierai.