Update #2: On Tuesday evening, Twitter updated their status blog explaining what happened. The company writes, "It appears that for a number of years, a person has been creating torrent sites that require a login and password as well as creating forums set up for torrent site usage and then selling these purportedly well-crafted sites and forums to other people innocently looking to start a download site of their very own. However, these sites came with a little extra — security exploits and backdoors throughout the system. This person then waited for the forums and sites to get popular and then used those exploits to get access to the username, email address, and password of every person who had signed up." In turn, people who use the same username and password on Twitter were left vulnerable, and some of them were exploited in this attack.