X investigates password reset requests amid X Money expansion
Users reported receiving password reset emails they did not initiate.
1Surge in password reset requests
X users reported receiving unsolicited password reset emails. The platform linked this activity to malicious attempts to access accounts following the expansion of X Money. X stated it has found no signs of a breach in its systems. Many users received multiple verification code emails without requesting them.
2X's official statement
X product team member Mridul Singhai confirmed the company is investigating the issue. Singhai suggested bad actors might be trying to exploit the X Money expansion. The company emphasized no evidence of data breaches has been found yet. Singhai apologized to users for the flood of emails they received.
3Account security measures
X recommended users enable two-factor authentication for account protection. The company also advised using Password Reset Protection, which requires additional verification. Users were warned against clicking links in suspicious messages. These measures aim to prevent unauthorized access attempts.
4X Money rollout
The incident followed X Money's availability to US Premium and Premium+ subscribers. The payment service allows direct money transfers between X users. This expansion is part of X's strategy in financial services. The move increases the platform's involvement in payment systems.
5Legal response
X's Chief Legal Officer James Burnham addressed the situation. Burnham stated legal and security teams would identify and pursue those attacking users. The company committed to legal action to protect its user base. Efforts continue to prevent similar attempts in the future.
6User reactions
Many users took to social media to share their experiences. Some expressed concerns about account security. X thanked users for their patience while addressing the issue. The platform reassured users their accounts remain secure despite the emails.
7US regulatory concerns
Senator Elizabeth Warren had previously raised concerns about X Money's launch. Warren questioned financial regulations and user safety aspects. This incident validates some of Warren's warnings. The expansion may subject X to increased regulatory scrutiny.
8Cybersecurity perspectives
Experts describe such attacks as examples of social engineering tactics. Large platforms like X need additional security measures for user protection. Features like two-factor authentication and password reset protection are basic safeguards. Cybersecurity professionals recommend users activate such protections.