X (Twitter) Alert: Major Password Reset Attack Breaks Out

X accounts were hit on Tuesday by password reset emails nobody asked for. One user’s inbox shows eight emails landing in three minutes. X says it has found no breach. The emails are real, coming from X itself, not from fake senders.

Attackers are pointing X’s own recovery form at public usernames, over and over. BEWARE OF THIS!!

ENABLE 2FA AND PASSWORD RESET PROTECT ON YOUR X ACCOUNTMany accounts are getting breached https://t.co/uy5pFsW9hB— Sweep (@0xSweep) September 1, 2026 Follow us on X to get the latest news as it happens Major Hack Attempt on X X answered through Mridul Singhai, a product engineer at the company.

He gave a motive, denied a breach, and apologized. Attackers appear to believe that, now that XMoney is widely available, they can gain unauthorized access to accounts. We are actively investigating the issue and, so far, have found no evidence of any breaches.