Abnormal Password Reset Emails Hit Thousands of X Users, Including Multiple Crypto Industry Accounts

Odaily News: On September 1, thousands of X users reported receiving password reset emails that they did not initiate, including multiple crypto industry accounts and some media professionals. Some users received up to 10 such emails within a few hours. Crypto investor Nic Carter stated that a large number of users are receiving X password reset requests and recommended enabling X's "Password Reset Protect" feature. Crypto user cap.eth said that even with two-factor authentication enabled, someone is still attempting to reset their password. Currently, there is no evidence that X's system has been compromised or that a large-scale account takeover has occurred. X's security mechanism allows attackers to initiate password reset requests using only public usernames, after which X sends a reset email to the linked email address. Therefore, receiving the email does not necessarily mean that the user's email address has been leaked. X has not yet publicly responded to this abnormal password reset request, nor has it confirmed any coordinated attack activity or security incident. Industry insiders advise users to check their account security settings and enable the password reset protection feature.