Twilio

Twilio's 2022 breach began with messages that made a false login page look like ordinary work, but its significance lies beyond the stolen employee credentials. A cloud communications provider concentrated customer support access, phone-number verification, authentication services, and downstream user data behind those identities. The incident shows how a provider's internal authority becomes customer risk, why cheap and renewable abuse infrastructure can exhaust slower reporting channels, and what accountability requires after a company replaces a phishable control with a stronger one.