Massive Data Breach: Hacker Releases 200 Million User Records Gratis

Massive Data Breach: Hacker Releases 200 Million User Records Gratis

• Hacking Intrusion: A hacker using the name ThinkingOne released more than 200 million user records linked to X, the social media platform.
• Data at Risk: The records include email addresses, names, screen names and other profile details.
• Motivations Unclear: The data was posted for free, and the hacker’s motives are unclear.
• Call for Vigilance: Security researchers urge X users to watch for phishing and secure their accounts.
• Industry Repercussions: The leak raises questions about how platforms protect user data.

What was leaked

In March 2025, a hacker using the name ThinkingOne posted a file of about 200 million user records linked to X on a hacking forum, free for anyone to download. The file contains email addresses, names, screen names, locations and other profile fields. Much of the data was already public on users’ profiles, and no passwords were included. The email addresses are the most sensitive part, because they link accounts to real people.

Davey Winder reported the leak in Forbes. The hacker said it combined data from an earlier, larger claimed leak of 2.8 billion Twitter IDs with older records, and gave no stated financial or ideological motive for releasing it.

Why give it away?

Data sets this size can sell for real money, so giving it away puzzled researchers. Some think the aim was to embarrass the platform. Others warn that a free release simply spreads the data further and faster, and that criminals will mine it for phishing.

Once a file like this is public, it gets copied and stored by people the victims will never know about. It cannot be taken back.

Implications for Users: Stay Alert

The leak shows how exposed personal information on large platforms can be. X account holders can act now. Turn on two-factor authentication, use a unique password, and watch for unusual account activity. Be wary of emails that claim to come from X, since attackers can use leaked addresses and screen names to make phishing messages look convincing.

Industry Response: A Call for Improved Protocols

Large platforms like X face growing scrutiny over how they protect user data. Leaks like this one keep the pressure on.

The incident may feed debate about stronger data protection rules and limits on how much user data platforms collect and expose through their APIs.

What X users should do now

A leak of 200 million user records linked to X is a reminder that even mostly public data can be dangerous once it is compiled into one file. The full story behind the release is still unclear, but the practical risk for users is clear enough.

Account holders can tighten their own security. Platforms need to do more to stop scraping and bulk data collection before files like this end up on hacking forums.

Dan Evert, CCNP

Dan Evert is a self proclaimed Router Jockey. Dan got heavily involved in networking right out of high school and has never looked back! Dan is giving back by working with high school students to get them involved and interested in Networking and Security.