"The hackers gained access to the ("X") accounts by convincing a small number of TWITTER EMPLOYEES to hand over their internal login details, which eventually granted them access to the social media site's administrative tools."
https://www.bbc.co.uk/news/articles/c709ppwpw1wo