Twitter Says An Attacker Used Its API To Match Usernames To Phone Numbers