Bug survived since late 2014
https://www.bleepingcomputer.com/news/security/twitter-fixes-four-year-old-bug-in-android-app-exposing-private-tweets/
Twitter announced today that an issue in its app for Android exposed some users’ protected tweets for over four years if they made certain changes to their account settings.
As a result, content intended only for approved followers became publicly visible.
Bug survived since late 2014
Jan 17, 2019, 11:16pm UTC
https://www.bleepingcomputer.com/news/security/twitter-fixes-four-year-old-bug-in-android-app-exposing-private-tweets/
> Twitter announced today that an issue in its app for Android exposed some users’ protected tweets for over four years if they made certain changes to their account settings.
> As a result, content intended only for approved followers became publicly visible.