Thread by @sophieleblance3

GETTR Gets Hacked, 90,000 User Locations Exposed, Accounts CANNOT Be Deleted 🥵🤦🏼‍♀️



The hack was due to “bad API” implementation on the site

GETTR, the new social media launched by Trump advisor Jason Miller, has been hacked, with over 90,000 user locations and details exposed. Users also cannot delete their accounts.

A post on a forum on Tuesday showed that GETTR, which was only officially launched on July 4th,was hacked by “threat actors” who were able to scrape the user data of over 90,000 people.

The data, which was accessed via exploiting “bad API” implemented on GETTR, did not include password hashes and data that could be used to log into accounts, but did include emails, usernames, and most worryingly, the location data of the users.

Alon Gal, who discovered the forum post, told Vice that it should be considered a data breach, despite the absence of login information.

“When threat actors are able to extract sensitive information due to neglectful API implementations, the consequence is equivalent to a data breach and should be handled accordingly by the firm and to be examined by regulators,” he said.

This is not the first time that GETTR has been hacked, with a hacker who claimed to live in Baghdad, Iraq, taking over many verified profiles on the site on launch day itself, changing their usernames to “@JubaBaghdad was here , free palestine.”

The hacker told Business Insider that the hack was “just for fun,” and noted that it was quite “easy,” adding that GETTR should not have gone online “before making sure everything, or at least almost everything, is secure.”