# Twitter200M WHAT HAPPENED In early 2023, a hacker posted a list of over 200 million Twitter records on a hacking forum [https://www.bleepingcomputer.com/news/security/200-million-twitter-users-email-addresses-allegedly-leaked-online/].  This data was collected in 2021 by using a bug in Twitter's system that let someone match email addresses to Twitter accounts. This created a big list linking people's email addresses to their public Twitter information, like their names and usernames. HOW TO STAY SAFE 1. Change the password on your email account Since this leak exposed email addresses, updating your email password will reduce the risk of someone trying to access your inbox. This is especially important if you use the same password on other websites.  Follow one of our step-by-step guides depending on which email provider you use: How to Change Your Gmail Password [https://help.futureproof.app/article/1032-how-to-change-your-gmail-password] How to Change Your Yahoo Password [https://help.futureproof.app/article/1033-how-to-change-your-yahoo-password] How to Change Your AOL Password [https://help.futureproof.app/article/1034-how-to-change-your-aol-password] How to Change Your iCloud Password [https://help.futureproof.app/article/1035-how-to-change-your-icloud-password] How to Change Your Hotmail or Outlook Password [https://help.futureproof.app/article/1036-how-to-change-your-hotmail-or-outlook-password] How to Change Your Email Password (for other Email Accounts) [https://help.futureproof.app/article/1037-how-to-%D1%81hange-your-email-password-for-other-email-accounts] Then, turn on Two-Step Verification while you're there, so your account is harder to access even if your password is compromised again in the future. You’ll also find how to do that by clicking the links above. 2. Review your Twitter account security too Update your Twitter password and check for any unfamiliar login activity, especially if you reuse passwords across platforms. WHY THIS BREACH MATTERS Even though this breach happened back in 2023, leaked data doesn't just expire. It keeps getting bought, sold, and reused by scammers.  And even if you've never used this exact site before, your email may have still ended up in it through a partner, data broker, or another service behind the scenes.  If you've ever reused this password anywhere else, it's worth taking a minute to secure it now.