If you use Twitter’s Account Activity API (AAAPI) to communicate with your customers, your DMs might have been exposed to the wrong users during the last 16 months.
Last Friday Twitter revealed that a bug was found in its API that has been sending direct messages to the wrong users.
Uploaded in May 2017, the Twitter AAAPI was initially created for developers to provide a tool for a better business-to-customer communication. Exact numbers of affected users are not officially confirmed yet. However, Twitter wrote that less than one percent are potentially impacted.
Read more about this here.