Elon Musk · CoinDesk
Musk’s X hit by wave of unsolicited password reset emails
Compiled by KHAO Editorial — aggregated from 1 source. See llms.txt for citation guidance.
★ Tier-1 Source
Thousands of X users are reporting a wave of unsolicited password reset emails, including several prominent crypto accounts, raising concerns about an attempted account-takeover campaign or possible leak.
Key facts
- Data tied to more than 200 million accounts later circulated online on darkweb forums in 2023
- Crypto investor Nic Carter said Tuesday that “a lot of people” were receiving unsolicited reset attempts and urged users to switch on X’s Password Reset Protect feature
- A lot of people getting unsolicited X password reset attempts in their email inbox
- At least four CoinDesk staffers separately said they received similar emails Tuesday, including two whose email addresses associated with X were not widely used
Summary
Thousands of X users, including prominent cryptocurrency accounts and CoinDesk staff members, reported receiving unsolicited password-reset emails on Tuesday. The emails do not necessarily indicate that attackers obtained users’ addresses because X allows anyone to initiate a reset request with a public username. Users can enable Password Reset Protect to require confirmation of an account’s email address or phone number, though there is no confirmed evidence of a breach or widespread account takeovers. X has an outsized role in the crypto industry, as traders, projects and executives use it as a primary channel for announcements, market commentary, niche trading ideas and breaking news.