Authy phone numbers accessed by cybercriminals, warns Twilio

Twilio warned that an unsecured Authy API endpoint was abused to verify phone numbers for millions of users; a threat actor (ShinyHunters) later posted a CSV claiming ~33 million Authy phone numbers. While Twilio reports no evidence of internal system compromise, the exposed numbers increase risk of SIM-swap and phishing attacks, and users are advised to update Authy and monitor for suspicious messages.