X Investigates Mass Password Reset Attempts After X Money Launch
X investigates mass password reset emails after X Money's launch, with no confirmed breaches as users are urged to enable two-factor authentication now.
Summary
X is investigating widespread unsolicited password reset emails reported after X Money became widely available. On Tuesday, September 1, 2026, product engineer Mridul Singhai said attackers appeared to be targeting accounts because of the payments launch, but X had found no evidence of successful breaches or mass takeovers. Grok said attackers were mass-triggering reset forms using public usernames.
X Money includes a bank card and other benefits, and could help creators collect payments within X’s digital economy. Users are urging others to enable two-factor authentication, while Grok has shared protection steps and recommended Password Reset Protect. X had not detailed the campaign through an official company account or provided further comment. General counsel James Burnham said X’s legal and security teams would identify, locate and pursue criminal accountability for anyone attempting to victimize users as the investigation and reset attempts continue.
Positives
- X found no evidence of successful breaches or mass account takeovers as of September 1, 2026.
- Mridul Singhai confirmed X is actively investigating the mass password reset attempts.
- Grok shared account-protection steps and recommended enabling Password Reset Protect.
- X Money’s bank card and other benefits could help creators collect payments within X’s digital economy.
- James Burnham said X’s legal and security teams would pursue criminal accountability for attackers targeting users.
Risks & concerns
- Numerous X users received repeated unsolicited password reset emails after X Money became widely available.
- Attackers are mass-triggering password reset forms using publicly available usernames, according to Grok.
- X Money’s payment capabilities may make user accounts more attractive targets for unauthorized access.
- X had not posted details through an official company account or provided further comment.
- The password reset attempts were continuing while X investigated their scope and origin.