Home›Crypto›Market Structure›X users report wave of unsolicited password reset emai…

X users report wave of unsolicited password reset emails

Some recipients said they got up to 10 reset messages within a few hours, while X has not confirmed any breach or widespread takeovers.

Reported · Written up by our desk · Market Structure

Thousands of X users, including prominent cryptocurrency accounts and CoinDesk staff, reported receiving unsolicited password reset emails on Tuesday, raising concerns about an attempted account takeover campaign. The incident did not come with any confirmed proof of an X breach or broad account takeovers, CoinDesk said.

The outlet noted that X allows anyone to initiate a reset request using a public username, after which X sends the reset message to the email address attached to the account. Users can also enable “Password Reset Protect” to require confirmation of an account’s email address or phone number.

CoinDesk cited crypto investor Nic Carter urging users to turn on Password Reset Protect, and referenced a crypto user, cap.eth, who said someone tried to reset his password aggressively despite having two factor authentication enabled. Several CoinDesk staffers reported similar emails, including two staffers whose email addresses tied to X were not widely used.

CoinDesk said X has not publicly commented on the reset attempts, and has not identified any coordinated campaign or specific security incident. The article added that X has previously experienced large scale account data exposure, including an earlier API flaw in 2021.

Latest closeEthereum $2,418.74 ▼1.9%

More like this

Sources