November 2020 Parler Hack

Overview

The Parler Hack refers to an unconfirmed security breach of the social media website Parler, a micro-blogging platform similar to Twitter that is popular with conservatives. The supposed leak occurred on November 24th, 2020, with some on Twitter saying that a host of user information, including direct messages and social security numbers, leaked as a result of the hack. However, others confirmed that the list was from a previous data breach. Parler CEO John Matze claims the hack never took place.

Background

On November 24th, 2020, people online began spreading news of a hack at the social media site Parler. The earliest available post about the supposed hack occurred that day on Twitter, ^[1] when user @MattyLanza tweeted, "Parler has been hacked. Alot of pus is gonna start oozing out of that boil. #Parler #ParlerHack" (shown below).

That day, data scientist Kevin A. Bosch tweeted,^[2] "I've seen what looks like legit proof of 5,000 compromised Parler accounts including DM's of some well-known figures. Hackers decompiled the app, zero day exploit.. I wish I could unsee what I've seen." The user later deleted the tweet (shown below).

Developments

Online Reaction

That day, news of the leak went viral. Twitter account @CopingMAGA tweeted,^[3] "BREAKING: There was just a #parlerhack, this was publicly available and unencrypted on their public API endpoint. Not sure what they've changed yet, although expect a ton of data shortly, we will post updates. #ParlerLeaks." The tweet included a screenshot of a selection of the data supposedly released. The post received more than 3,400 likes and 1,100 retweets in less than 24 hours (shown below, left).

Writer Mikael Thalen refuted the news on Twitter,^[4] stating that the information released comes from a previous leak. They wrote, "While there is an unconfirmed report of Parler being hacked, the screenshot circulating of a Parler database password is old. I looked into the database leak in July and confirmed thanks to @WhiskeyNeon that it was for a site not held on the same infrastructure as the main site." Thalen also corrected the rumor that Parler is based on WordPress.

BuzzFeed ^[5] writer Jane Lytvynenko criticized the original posting about the hack. They wrote, "The man who said "I wish I could unsee what I've seen" abt *unconfirmed* Parler hack has spread false/irresponsible info on Twitter before, if I remember right. Take care. As @MikaelThalen points out, screenshot floating around is from summer, not recent. Wait for verification." The post received more than 1,100 likes and 500 retweets in less than 24 hours (shown below, right).

Parler Response

That day, Parler CEO John Matze posted to the site that the circulating screenshot is from months ago.^[6] He called the rumor "irresponsible" and refuted rumors that Parler requested users' social security numbers for verification. They wrote:

The alleged “Parler hack” is a screenshot from a WordPress website that has been circulated repeatedly over the past 6 months, despite Parler’s multiple responses that we do not use WordPress products, nor WordPress databases. All of our databases are hidden behind multiple layers of security and are not accessible via the web. This is an irresponsible rumor which uses a “techie” looking WordPress config file which is only capable of confusing a journalistic hack, not an actual hacker. If Twitter continues to fact check others, they should also fact check posts such as these that spread viral misinformation.

Furthermore, we don’t store any personal data, user verification data is deleted on completion, and direct messages cannot send videos/images. All allegations are fake. They are just obsessed with us.

Search Interest

External References