Twitter said that it had discovered attempts by possible state actors to access the phone numbers associated with user accounts after a security researcher unearthed a flaw in the company's "contacts upload" feature. In a statement published on its privacy blog, Twitter said it had identified a "high volume of requests" to use the feature coming from IP addresses in Iran, Israel, and Malaysia.