U.S. Department of Justice Investigates Responsibility for X Cyber Attack

The U.S. Department of Justice is investigating a cyber attack against X that occurred this week. On September 2, 2026, Todd Blanche stated that hundreds of thousands of users were targeted in an attempt to hijack accounts through the password recovery process. The company promptly thwarted this action, preventing account breaches. Investigators are collaborating with X to identify the criminals involved. The incident was revealed on September 1, when users reported receiving multiple password reset emails, with some users receiving about ten emails around 9:30 AM Eastern Time. These emails appeared legitimate, coming from official email addresses and included a six-digit code. Engineer Mridul Singhai stated that the company found no signs of a breach and apologized for the number of emails. Singhai linked the attack to X Money, suggesting that the attackers may have sought unauthorized access following the widespread availability of the payment product. The platform had previously experienced a data breach in April 2025, releasing a 34 GB file containing 201,186,753 records. Recently, U.S. authorities have intensified their actions against cybercrime, collaborating with CrowdStrike and Shadowserver Foundation on September 2 to dismantle the Sality botnet based in Russia, which has infected over 11 million devices over 23 years.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.