X Is Investigating a Wave of Mass Password Reset Requests Amid the Expansion of X Money

• X users reported receiving multiple password reset emails they did not initiate.
• The company linked the activity to attackers attempting to access accounts following the expansion of X Money.
• X stressed that it has not yet found any signs of a breach of its own systems.

Social network X is investigating a wave of unauthorized password reset requests targeting users. The issue was flagged by a number of account holders who reported receiving multiple emails and verification codes without making any such requests themselves.

Mridul Singhai, a product development team representative at X, confirmed that the company is looking into the situation. According to him, attackers are likely hoping to gain unauthorized access to accounts amid the rollout of the X Money payments service.

“We are actively investigating this issue and, so far, have found no evidence of any breaches,” Singhai said.

He also apologized to users for the multiple emails sent as part of the password reset attempts.

According to user reports, attackers may be triggering the password recovery process at scale using public account usernames. Receiving such an email does not mean a user’s password has been exposed or that the account has been compromised. 

X chief legal counsel James Burnham also responded to the situation. He said the company’s legal team and security specialists intend to identify and pursue accountability for those attempting to attack platform users. 

X recommends that users enable two-factor authentication and the Password Reset Protection feature, which requires additional information when attempting to recover a password. Users are also advised not to click links in suspicious messages. 

The incident occurred amid the expansion of X Money. The payment service became available to owners of U.S. accounts with Premium and Premium+ subscriptions. It allows users to send money to other users directly through the X platform.

As of writing, no separate statement on the incident had been published on X’s official corporate accounts. Company representatives, however, stress that there are currently no signs of a compromise of X’s infrastructure or a mass takeover of accounts.

Earlier, U.S. Senator Elizabeth Warren raised concerns about the launch of X Money. 

Сообщение X Is Investigating a Wave of Mass Password Reset Requests Amid the Expansion of X Money появились сначала на INCRYPTED.