X Investigates Surge in Password Reset Requests as Account Takeover Fears Grow 

Leave a Comment / Cybersecurity, Data Protection, Enterprise Technology, Industry News / By cxojunction 

X is investigating a surge of unsolicited password-reset requests after users reported receiving multiple alerts within minutes, raising concerns about possible attempts to access their accounts. 

Some users said they received as many as 10 password-reset notifications within minutes, with screenshots showing repeated alerts arriving just seconds apart. While the activity prompted fears of compromised accounts, X product engineer Mridul Singhai said the company had found no evidence of a breach so far. He said attackers appear to believe that the wider availability of X Money could give them an opportunity to gain unauthorized access to accounts. 

The activity comes as X Money, the platform’s payments service, has expanded to Premium and Premium+ subscribers with US accounts. The service uses banking infrastructure from Cross River Bank and allows users to transfer money through the platform. Its wider availability has raised concerns that attackers may now see X accounts as more valuable targets because they could potentially provide access to payment-related features. 

Security researchers and users have speculated that the password-reset attempts may have been mass-triggered using publicly available usernames rather than through a direct compromise of X’s systems. However, this has not been independently verified. An unsolicited reset notification by itself does not confirm that a password has been exposed or that an account has been taken over. X is continuing to investigate the activity, while the company has not provided a detailed official statement confirming the scale or origin of the attempts. 

For organizations, the incident highlights the importance of protecting account-recovery mechanisms alongside traditional login security, particularly when platforms introduce financial or payment features. Companies should monitor unusual password-reset activity, implement rate limits and abuse detection around recovery workflows, and provide users with additional controls such as password-reset protection and multi-factor authentication. Clear alerts and rapid investigation of abnormal recovery requests can also help distinguish automated abuse from genuine account compromise and reduce the risk of unauthorized access.

CXO Junction remains dedicated to providing you with exclusive insights into transformative leadership journeys. Stay tuned for more updates as we continue to bring industry news to you. 

Source: X Users Get Flooded with Password Reset Requests, Raising Fresh Data Breach Fears | NDTV Profit | https://www.ndtvprofit.com/technology/x-users-get-flooded-with-password-reset-requests-raising-fresh-data-breach-fears-11990082