Twitter faces class-action privacy lawsuit for sharing security info with advertisers - CNET

Phone numbers for two-factor authentication were used by advertisers.