Users of Twitter’s official clients and the web interface has received notification that urges you to update the password for access to the service. In the system of mask data of the detected error: the account passwords were stored unencrypted in the internal magazine of the company.
We recently found a bug where passwords were stored in an internal log in the clear. We have corrected this error, and the investigation revealed no signs of a security breach or misuse.
Reuters reports that while Twitter says there are no leaks, a substantial portion of the accounts could be compromised, as the passwords were stored in plaintext for a few months.
In addition to changing password, Twitter recommends that you enable two-factor authentication. At the entrance in addition to the password service will send the SMS or the Google Authenticator app unique code.