Researchers say the information was assembled by unknown actors who exploited a previously disclosed flaw in Twitter's system for verifying account ownership.