twitter disclosed that a 'security incident' caused private tweets sent to twitter Circles to show publicly to users outside of the Circle.
Twitter circle is a characteristic released in august 2022 that allows users to send tweets to a small circle of people, promising to keep them private from the public.
Twitter circle is a way to send Tweets to select people, and part your thoughts with a smaller crowd, reads Twitter's description of the privacy feature.