Could also be a third party service compromise (ex: one used for marketing&#x2F;scheduled posts) seeing that some of them are business or organizations.

I was thinking more along the lines of the API auth&#x2F;&#x2F;access control getting messed up. But a third party service linked to the accounts is more likely.Unfortunately Twitter doesn&#x27;t do post mortems of events&#x2F;outages, so we probably won&#x27;t know the real story.

I wonder if this accidentally exposed the moderator admin interface.

Related to their Cloudflare migration?

A number of large accounts on X currently have their account compromised