THE IRISH DATA Protection Commission has contacted Twitter in relation to allegations that it has serious online security failings.

US television network CNN and the Washington Post have revealed allegations by former Twitter security chief Peiter Zatko.

Zatko’s complaint, which was published today by US media, also accused Twitter of significantly underestimating the number of fake and spam accounts. This forms a key element in Elon Musk’s argument for trying to cancel his $44 billion deal to own the platform.

Graham Doyle, Deputy Commissioner of the Irish Data Protection Commission (DPC) told The Journal this evening that the DPC were in touch with Twitter. 

“We’ve been engaging with Twitter and will continue that engagement on the issues,” he said.

The Irish DPC is the watchdog for Twitter in Europe as the company has it’s regional headquarters in Dublin.  

CNN and the Washington Post quote Zatko’s legal document to the US market watchdog Securities and Exchange Commission as accusing Twitter of “negligence, willful ignorance, and threats to national security and democracy.”

Zatko, who Twitter says it fired earlier this year for poor performance, warns of obsolete servers, software vulnerable to computer attacks and executives seeking to hide the number of hacking attempts, both from US authorities and from the company’s board of directors.

The hacker-turned-executive, who goes by the nickname “Mudge,” also claims that Twitter prioritises growing its user base over fighting spam and bots, the filing says.

Twitter has dismissed the allegations.

A company spokesperson told AFP earlier today that Zatko was fired in January this year for “ineffective leadership and poor performance.”

“What we’ve seen so far is a false narrative about Twitter and our privacy and data security practices that is riddled with inconsistencies and inaccuracies and lacks important context,” the spokesperson said in a statement.

The “opportunistic timing” of the allegations appears “designed to capture attention and inflict harm on Twitter, its customers and its shareholders,” the statement continued.

“Security and privacy have long been company-wide priorities at Twitter and will continue to be.”

Twitter has sued to keep Musk from walking away from the buyout, and a trial is set for mid-October on whether the billionaire can be forced to close the deal.

Musk case

The issue of fake accounts is at the heart of the legal battle between Twitter and Tesla chief Musk.

The billionaire has repeatedly accused the company of minimising the number of fake accounts and spam on its platform.

Musk is relying on the argument to justify abandoning his plan to buy Twitter for $44 billion (€44bn) and avoid paying severance.

CNN said Zatko had not been in contact with Musk, and that he had begun the whistleblower process before there was any sign of the billionaire’s involvement in Twitter.

“We have already issued a subpoena for Mr Zatko, and we found his exit and that of other key employees curious in light of what we have been finding,” Musk’s lawyer Alex Spiro told AFP.

The Washington Post and CNN both reported that the US Senate Intelligence Committee wants to meet with Zatko to discuss his accusations.

Zatko was hired in late 2020 by the founder and former boss of Twitter, Jack Dorsey, after a massive hack that saw the accounts of major users including Joe Biden, Barack Obama, reality star Kim Kardashian and Musk himself compromised.

US lawmakers immediately raised concerns about the allegations in Zatko’s filing and have pledged to look into them.

“If these claims are accurate, they may show dangerous data privacy and security risks for Twitter users around the world,” Senator Dick Durbin said in a statement.

With reporting from © AFP 2022