"Twitter accused of helping Saudi Arabia commit human rights abuses", 4 Sept 2023

The social media company formerly known as Twitter has been accused in a revised civil US lawsuit of helping Saudi Arabia commit grave human rights abuses against its users, including by disclosing confidential user data at the request of Saudi authorities at a much higher rate than it has for the US, UK or Canada.

The lawsuit was brought last May against X, as Twitter is now known, by Areej al-Sadhan, the sister of a Saudi aid worker who was forcibly disappeared and then later sentenced to 20 years in jail.

It centers on the events surrounding the infiltration of the California company by three Saudi agents, two of whom were posing as Twitter employees in 2014 and 2015, which ultimately led to the arrest of al-Sadhan’s brother, Abdulrahman, and the exposure of the identity of thousands of anonymous Twitter users, some of whom were later reportedly detained and tortured as part of the government’s crackdown on dissent.

Lawyers for Al-Sadhan updated their claim last week to include new allegations about how Twitter, under the leadership of then chief executive Jack Dorsey, willfully ignored or had knowledge of the Saudi government’s campaign to ferret out critics but – because of financial considerations and efforts to keep close ties to the Saudi government, a top investor in the company – provided assistance to the kingdom...

Twitter, now X, does not respond to questions from the press...

The lawsuit also alleges that Twitter had “ample notice” of security risks to internal personal data, and that there was a threat of insiders illegally accessing it, based on public reporting at the time...

Saudi Arabian authorities, the lawsuit alleges, would formally follow up with Twitter once it received confidential user data from its agents working inside the company, by filing so-called EDRs – or emergency disclosure requests – in order to obtain documentation that confirmed a user’s identity, which it would then use in court...

Twitter would later notify users who had been exposed, telling them their data “may” have been targeted, but did not provide more specific information about the scale or certainty that the breach had, in fact, occurred.

By “failing to give this crucial information, Twitter put thousands of Twitter users at risk”, the lawsuit alleges, claiming that some may have had time to escape the kingdom had they understood the risk...