Some Twitter users claim their private tweets, which often contain nude images, are being leaked publicly.
The lapse relates to a secure feature called Twitter Circles, which enables users of the social network to discreetly share tweets with up to 150 accounts of their choice. Upon its launch last August, Twitter described the function as a way to “have more intimate conversations and build closer connections with select followers”.
However, several users told Buzzfeed News that their private tweets have been seen by people they weren’t intended for. An author named Abraham Josephine Riesman said a “risque” image of her had been liked by a person who wasn’t in her private Twitter circle.
At the time of writing, it’s unclear what’s causing the issue. But, it marks the latest embarrassing faux pas by Twitter and could even result in a fine for the platform, according to a legal expert. Ireland’s data regulator previously handed Twitter a fine of €450,000 (£395,000) in 2020 over a “bug” that saw some private tweets publicly exposed in 2019.
A former Twitter data scientist has blamed the lapse on the layoffs orchestrated by Twitter CEO Elon Musk. Privacy and information security lawyer Whitney Merrilll has said the issue represents a “data breach under EU law”.
“Unfortunately, like so much else under Musk it’s now broken, with all those private convos now shared with everyone,” said former Twitter staffer Meillsa Ingle in a tweet about Twitter Circles.
“Imagine your DMs showing up on the main timeline. I strongly suspect there is no longer the expertise to keep up this relatively new feature,” she added in a follow-up.
Imagine your DMs showing up on the main timeline. I strongly suspect there is no longer the expertise to keep up this relatively new feature.
— Melissa Ingle (@mingle74) April 10, 2023
I made a Twitter Circle with one person in it and posted this tweet for science. This was the result. Two people I don't follow saw the tweet & liked it. One of those people doesn't follow me either.
— Ian Coldwater 📦💥 (@IanColdwater) April 10, 2023
Twitter Circles aren't private. Don't post anything you want private in them. pic.twitter.com/p5uzlmIkuJ
This is a data breach under EU law. See the ~$550K fine from the Ireland DPC in 2020 over a permissions bug.
— Whitney Merrill (@wbm312) April 10, 2023
The "Only people in @ IanColdwater's Twitter Circle can see this Tweet" scopes this to only a certain set of users, which is then not respected & shared more widely. https://t.co/6S8ilME5dj
What are Twitter Circles?
Twitter Circles allow you to share tweets with a handpicked group of users instead of everyone on the platform.
You can add up to 150 accounts to a Twitter Circle, including people you don’t follow and vice versa. Before you post a tweet, you can select to share it with this group by tapping “Twitter Circle” in the Choose Audience menu.
Though only you can see the full list of members in your Circle, others in the Circle can see likes and replies to your private tweet, unless they’re from accounts that are set to private.
Despite the added security of the feature, it’s worth bearing in mind that Twitter Circle members can still download or screenshot your secret images or tweets to re-share with others.
