Musk’s X hit by wave of unsolicited password reset emails

Users of X (formerly Twitter), particularly within the crypto community, are experiencing a wave of unsolicited password reset emails, prompting concerns about account security. While there's no confirmed system breach, users are being advised to activate X's 'Password Reset Protect' feature to add an extra layer of verification.
Why it matters
This incident underscores potential security vulnerabilities on a major global social media platform, which is a critical communication channel for various industries, including crypto. It highlights the importance of proactive user-side security measures to protect personal and professional accounts.
X has an outsized role in the crypto industry, as traders, projects and executives use it as a primary channel for announcements, market commentary, niche trading ideas and breaking news.
Crypto investor Nic Carter said Tuesday that “a lot of people” were receiving unsolicited reset attempts and urged users to switch on X’s Password Reset Protect feature. Another crypto user, cap.eth, said someone had been “aggressively” attempting to reset his password despite having two-factor authentication enabled.
A lot of people getting unsolicited X password reset attempts in their email inbox. Do the following: go to X settings -> security and account access -> security -> check "password reset protect" https://t.co/mOCZCYL7uj
At least four CoinDesk staffers separately said they received similar emails Tuesday, including two whose email addresses associated with X were not widely used.
That does not necessarily mean attackers have obtained users’ email addresses.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in