Twitter notifies users about API bug that shared DMs with wrong devs

Twitter said the API bug was active between May 2017 and early September 2018, for nearly 16 months.