The MarkUp and The Verge allege that H&R Block, TaxAct, TaxSlayer, and Ramsey Solutions have shared sensitive personal and financial user data with Meta via Meta Pixel, a JavaScript code snippet embedded in websites. The exposed tax filer data includes income filing status, refund amounts, and college scholarship amounts, in addition to more basic identifying information. And, while the number of people affected hasn’t been confirmed, it is estimated in the tens of millions. Why? Apparently, the data is useful to feed Meta algorithms for ad targeting.

A Twitter data breach last year, estimated to have exposed 5.4 million records, was thought to have been achieved and exploited by just one hacker. Now, evidence indicates multiple hackers accessed and then offered the data for sale on the dark web. The compromised data belonged to users from the UK, US and most of the EU countries. Twitter has not yet commented on the story, but as has been pointed out its communications team was just gutted following Elon Musk’s Twitter acquisition.