There's no such thing as "Direct" or private message in #twitter -- assume everything is always compromised, it is an open book https://www.maketecheasier.com/twitter-explains-further-how-internal-systems-were-hacked/