Twitter says hackers gained access to users by tricking staff over the phone