Tl;dr:

- probably all the data isn't from X

- the data seems to be all public - e.g.

   - user ID and screen name

   - number of followers

   - number of tweets

   - source of last Tweet (e.g. TweetDeck)

   - location and timezone

   - profile is protected or verified

I'm not sure that headline is very sensible to propagate.