Twilio API attack leaves customers with upwards $5k charges

A security breach at 3rd party Talkyto app is causing Twilio customers to be charged for fraudulent calls. Twilio confirmed the incident via email. Demanding customers pay the bill and agree to not dispute any charges they can negotiate a "partial refund”.