Twitter has been warned about security issues related to employees’ credentials since 2015.