X Platform Experiences Large-Scale Password Reset Email, Multiple Crypto Industry Accounts Receive Unauthorized Requests

September 1st, Thousands of X Users Report Receiving Unauthorized Password Reset Emails

, September 1st, Thousands of X Users Report Receiving Unauthorized Password Reset Emails, including several prominent accounts in the crypto industry and CoinDesk employees. Some users received up to 10 related emails within a few hours, sparking concerns in the market about potential account takeover attacks or data breaches.

Crypto investor Nic Carter stated that many users are receiving X password reset requests and advised enabling X's "Password Reset Protect" feature. Another crypto user, cap.eth, mentioned that even with two-factor authentication enabled, someone was actively attempting to reset their password.

Currently, there is no evidence to suggest that X's platform has been compromised or that a large-scale account takeover has occurred. X's security mechanism allows attackers to initiate password reset requests based solely on a public username, after which X sends a reset email to the associated email address. Therefore, receiving the email itself does not necessarily mean that the user's email address has been leaked.

X has not yet publicly responded to this unusual password reset activity, nor confirmed the existence of coordinated attack activities or security incidents. Industry experts advise users to review their account security settings and enable the password reset protection feature.