X is investigating reports that some users receive unsolicited password reset emails after the launch of its new payments service, X Money. The company says the messages appear to be part of an account-targeting effort and warns that hackers may be attempting a broader phishing attack.
Euronews and TechCrunch both report that the emails are password-reset requests that users did not initiate. TechCrunch frames the activity as a wave of account targeting that X is probing in connection with the X Money rollout. Euronews similarly describes the emails and notes X’s warning that the incident could extend beyond the reset emails. Both outlets emphasize that the activity involves potential phishing or compromised account access attempts, rather than confirmed data breaches.
At this stage, the sources describe an active investigation by X. They do not provide confirmed details on how many accounts are affected, what information (if any) is exposed, or whether there has been unauthorized access, only that the company is treating the emails as likely linked to the launch.
