Social networking site Twitter announced on Monday that the Federal Trade Commission (FTC) sent them a draft complaint on July 28. The FTC is investigating a Twitter data breach in which the private information of users was used for marketing purposes.
The data, email addresses, and phone numbers were provided by users to Twitter between 2013 and 2019 for two-factor authentication. The information solicited was supposed to be for “for safety and security purposes.” Instead, it was used to help target ads.
Twitter anticipates that the FTC may make them pay $150 million up to $250 million in fines. A spokesperson for Twitter says the company “included an estimated range for settlement” because it received the complaint after it’s quarterly results were filed July 23.
“The matter remains unresolved, and there can be no assurance as to the timing or the terms of any final outcome,” Twitter disclosed in its 10-Q filing with the Securities and Exchange Commission (SEC).
Twitter allows private information to targets ads
Twitter disclosed the breach of user privacy in an October 2019, statement claiming that it “inadvertently” allowed the private information to be used, calling it an error. The FTC believes that Twitter misled consumers by not disclosing that their data may have been used in this way.