X Users Flooded With Password Resets: Hacked or Glitch?

On September 2, 2026, numerous X users experienced a concerning influx of password reset requests, with many reporting at least 10 emails around 9:30 a.m. ET. These messages, originating from a legitimate-looking address, prompted widespread user concern about potential account breaches or phishing attacks.

X Product Engineer Mridul Singhai addressed the situation, stating that the company is actively investigating. As of the report, no evidence of any security breaches has been discovered. Singhai indicated that the issue appears linked to the newly available X Money payment platform, suggesting attackers may be attempting to exploit its public release.

To mitigate risks, users are advised against clicking links in suspicious emails and should instead verify their account status directly through the X app. Enabling additional security measures such as two-factor authentication (2FA) or passkeys is strongly recommended. Users can also activate 'Password reset protect' in their security settings for an extra layer of verification.