FULL STORY

X Hit by Mass Password Reset Attacks, Prompting Federal Probe

X users were hit by mass password reset email attacks, with suspicions pointing to a Grok-related data leak that the company denied. The campaign later targeted hundreds of thousands of accounts and triggered a federal investigation.

2026-09-01 ~ 2026-09-03 · 3 episodes · 10 posts

Episode 1 · X Hit by Password Reset Spam, Users Suspect Grok Bot Leak (2026-09-01, 2 posts)

X users report mass password reset email attacks, suspecting a Grok bot data leak since affected emails were only used to log into the bot. Others jokingly speculate the bot has "broken containment."

Episode 2 · X Hit by Wave of Password Reset Attempts; No Breach Found So Far (2026-09-01, 4 posts)

X users are experiencing a wave of unauthorized password reset emails, possibly linked to an unverified database of over 5 million email addresses. X says it is investigating and has found no evidence of a breach, while experts advise enabling 2FA and avoiding suspicious reset links.

Episode 3 · X Hit by Massive Password-Recovery Attack Targeting Hundreds of Thousands (2026-09-03, 4 posts)

X is investigating a large-scale password-recovery attack that targeted hundreds of thousands of users by mass-triggering password reset emails; the platform blocked the attempt and found no evidence of a breach, while the U.S. Department of Justice has launched a federal investigation.