X is investigating a wave of unsolicited password-reset emails that raised concerns about a possible security breach, Mridul Singhai, who works on X’s Product Engineering team, said Tuesday. The company has so far found no evidence that its systems were compromised.
Attackers appear to believe that, now that @XMoney is widely available, they can gain unauthorized access to accounts. We are actively investigating the issue and, so far, have found no evidence of any breaches.
We apologize for the multiple emails and appreciate your patience… https://t.co/zf1pRWbqBX
— Mridul Singhai (@singhai) September 1, 2026
Multiple X accounts reported receiving unexpected password-reset emails and confirmation codes despite not requesting them.
