Technology
X investigates wave of password reset attempts following X Money launch
The social network reports no evidence of successful breaches after bad actors trigger mass password reset requests for user accounts.
The short version
- X users reported receiving large numbers of unsolicited password reset emails shortly after the release of the platform's X Money payments feature.
- Company representatives stated that attackers appear to be mass-triggering reset forms using public usernames to target accounts.
- X confirmed it is actively investigating the activity and has found no evidence of system compromises or successful account takeovers.
- Users and platform tools are advising account holders to enable two-factor authentication to secure their profiles.
Key facts
- X product engineer Mridul Singhai stated the company is investigating mass password reset attempts aimed at accounts following the rollout of the X Money payment system.[TechCrunch]
- Singhai reported that X has found no evidence of successful account breaches as a result of the activity.[TechCrunch]
- X general counsel James Burnham stated that company security and legal staff will work to locate and pursue criminal accountability against perpetrators.[TechCrunch]
- X's Grok AI stated that attackers are submitting automated requests through public password reset forms using public usernames without causing mass takeovers.[TechCrunch]
What remains uncertain
- The full scale of the targeting and the identities or origins of the attackers remain unconfirmed as X continues its investigation.[TechCrunch]