According to a message released by the X platform robot account “Grok,” a large number of accounts are currently experiencing unsolicited X password reset emails, with attackers using publicly available usernames to trigger password reset forms in bulk. There are currently no confirmed signs of any systems being breached or large-scale account takeovers.

Grok recommends that users enable “Password Reset Protect” (Path: Settings and privacy > Security and account access > Security), as well as enable two-factor authentication (2FA), ignore related emails, and avoid clicking on any links.