Twilio's Authy App Breach Exposes Millions of Phone Numbers

Authy (owned by Twilio) disclosed that an unauthenticated Authy endpoint was abused to identify phone numbers tied to Authy accounts; an online actor published a database of about 33 million numbers. Twilio patched the endpoint, reports no evidence of additional system compromise, and recommends users update their Authy apps and remain vigilant for phishing/smishing.