[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

3 clusters · 14 sources · 15 days · First seen · Last updated

Security and account access issues on X

Overview

Security incidents involving user accounts on the social media platform X have emerged, involving both individual phishing attacks and large-scale automated attempts. One instance involved a ‘Vote Link Phishing Scam’ where a user lost access to their account after clicking a malicious link. The attacker changed the registered email address and triggered an account suspension. The user subsequently sought legal recourse through the Grievance Appellate Committee, alleging that X’s automated systems failed to provide an effective redressal process. Following the launch of the ‘X Money’ payments service, the platform faced a wave of unsolicited password-reset emails. Attackers used public usernames to trigger the reset process at scale. X product engineer Mridul Singhai stated that attackers appear to be targeting accounts due to the new availability of X Money, though the company noted there was no evidence of successful breaches or system compromises at that time. In conjunction with these security concerns, X announced a transition for all U.S. creator payouts from Stripe to X Money. This change affects payments from the Original Content Rewards Program and user subscriptions, moving from a bi-weekly schedule to a system intended to provide instant access to funds. Creators located outside the United States will continue to use Stripe. As the situation developed, U.S. Attorney General Todd Blanche noted that the Justice Department is working with X to track down criminals responsible for attempts to hijack hundreds of thousands of accounts. A massive wave of unauthorized password-reset requests targeting hundreds of thousands of accounts began on September 1, 2026. Attorney General Blanche confirmed the coordinated attack but noted X successfully interrupted the wave by September 2. While no evidence of internal database breaches has been found, the expansion into financial services has drawn criticism from U.S.

Entities

Mridul Singhai · Todd Blanche · X Money · Visa · SFLC.in

Claims

What the coverage asserts, and how many sources carry each claim.

Timeline

  1. 8 days ago

    [TECHNOLOGY] 3 sources
    X platform targeted by massive password-reset spam attack

    X faced a coordinated attack on its password-reset functions targeting hundreds of thousands of accounts. Officials report no evidence of a system breach or successful account takeovers.

  2. 10 days ago

    [TECHNOLOGY] 9 sources
    X faces cyberattacks and shifts creator payouts to X Money

    X is investigating a wave of unsolicited password-reset requests targeting users following the launch of X Money. Simultaneously, the platform is shifting U.S. creator payouts from Stripe to its own payment 서비스

  3. 23 days ago

    [TECHNOLOGY] 2 sources
    X user seeks legal appeal after phishing scam and failed account recovery

    An X user facing a ‘Vote Link Phishing Scam’ has turned to legal appeals after the platform’s automated recovery systems failed to resolve a compromised account takeover.

Sources

ad-hoc-news.de · americanbazaaronline.com · au.pcmag.com · balleralert.com · blocktempo.com · borncity.com · cryptopolitan.com · gigazine.net · it-daily.net · lunchbag.ca · techcrunch.com · tecnoandroid.it · wochentlich.de · zoldport.hu

This summary has been updated 3 times: see revision history