{
  "story_id": "ed51cdc277582680cdfe8bfd1da97c99",
  "desk": "drm3",
  "revision": 1,
  "published_at": "2026-09-02T06:50:38.000Z",
  "content_hash": "be2b34a7f43cf7a0cb087d70fd9a15877b1308cfb3869a4a40ee7ad0e6fdd1d0",
  "hash_basis": "sha256 over `headline\\ndek\\nprose`, plus `\\n` + the canonical citations JSON when any source is placed, plus `\\n#blog` for blogs",
  "basis": {
    "headline": "X Password Reset Emails May Mask Phishing Attack",
    "dek": "X users receive mass password reset emails that could hide a secondary phishing attack.",
    "prose": "X users are reportedly receiving multiple password reset confirmation emails en masse, allegedly triggered by hackers attempting to access their accounts. [^1]\n\nX product engineer Mridul Singhai posted on 2026-09-01 that X was investigating user complaints about unsolicited password reset emails, attributing the attempts to attackers who believe X Money's wide availability gives them a chance to gain unauthorized access, and said no evidence of breaches had been found. [^2]\n\nSome users claim that follow-up phishing emails are being sent out amidst the X password reset confirmations, disguised as legitimate emails from the platform. [^3]\n\nNumerous X users reported receiving unsolicited password reset emails following the launch of X Money, according to the article's reporting. [^4]\n\nX Money is X's newly launched payments service that includes a bank card and other benefits, designed to make it easier for creators to collect payments on the platform. [^5]\n\nUsers are warning each other to enable two-factor authentication, if not already enabled, to protect their accounts during the incident. [^6]",
    "cited": "[{\"statement\":\"X users are reportedly receiving multiple password reset confirmation emails en masse, allegedly triggered by hackers attempting to access their accounts.\",\"source\":\"Mashable\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T06:50:38.000Z\",\"publisher_count\":1,\"sources\":[\"Mashable\"]},{\"statement\":\"X product engineer Mridul Singhai posted on 2026-09-01 that X was investigating user complaints about unsolicited password reset emails, attributing the attempts to attackers who believe X Money's wide availability gives them a chance to gain unauthorized access, and said no evidence of breaches had been found.\",\"source\":\"TechCrunch\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T20:48:32.000Z\",\"publisher_count\":1,\"sources\":[\"TechCrunch\"]},{\"statement\":\"Some users claim that follow-up phishing emails are being sent out amidst the X password reset confirmations, disguised as legitimate emails from the platform.\",\"source\":\"Mashable\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-02T06:50:38.000Z\",\"publisher_count\":1,\"sources\":[\"Mashable\"]},{\"statement\":\"Numerous X users reported receiving unsolicited password reset emails following the launch of X Money, according to the article's reporting.\",\"source\":\"TechCrunch\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T20:48:32.000Z\",\"publisher_count\":1,\"sources\":[\"TechCrunch\"]},{\"statement\":\"X Money is X's newly launched payments service that includes a bank card and other benefits, designed to make it easier for creators to collect payments on the platform.\",\"source\":\"TechCrunch\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T20:48:32.000Z\",\"publisher_count\":1,\"sources\":[\"TechCrunch\"]},{\"statement\":\"Users are warning each other to enable two-factor authentication, if not already enabled, to protect their accounts during the incident.\",\"source\":\"TechCrunch\",\"instrument\":\"News\",\"claim_key\":null,\"published_at\":\"2026-09-01T20:48:32.000Z\",\"publisher_count\":1,\"sources\":[\"TechCrunch\"]}]",
    "kind": "news"
  },
  "receipt_verify": "Ed25519 over the dot-joined string `slice_hash.cursor_from.cursor_to.view.view_version.row_count`; public_key and sig are base64url of the raw 32-byte key / 64-byte signature",
  "receipt": null,
  "receipt_note": "this revision predates receipt-keeping (before v0.37.0); the filed row lives in the record",
  "generation_chain": {
    "wire": {
      "stream": "fountain_news",
      "story_id": "fc75148e804c77ee9ee834a36e63d30b",
      "thread_id": "0877e195444d2f974c749a679c0da21d",
      "thread_label": "James Burnham",
      "novelty": "UPDATE",
      "content_hash": "febfc0358f8123bfe1742e8aec8eebf6c5261cb74593eaf7bf5d81866e45b797",
      "last_published_at": "2026-09-02T06:50:38.000Z",
      "read_receipt": {
        "slice_hash": "069682019ef400563585527bab6474e0dc4419c25869011c2b01ad23bb466b71",
        "cursor_from": "eyJ0cyI6IjIwMjYtMDktMDJUMDY6NDY6NTIuMDAwMDAwWiIsImlkIjoiMWFmYjlhNThjYWIzZjJmNGNkN2I3YTRiZmQ3Y2YwOGYiLCJ2IjoiMSJ9",
        "cursor_to": "eyJ0cyI6IjIwMjYtMDktMDJUMDc6NDg6NDkuMDAwMDAwWiIsImlkIjoiZTlkZTA0NWE4NTRkNDJhYzAwMTVhN2EzZGE3MWMzOGQiLCJ2IjoiMSJ9",
        "view": "v_fountain_news",
        "view_version": "1",
        "row_count": 100,
        "window_days": 3,
        "bytes_scanned": 12017721,
        "credits": 8,
        "price_per_100_rows": 8,
        "sig": "4e4uuUUMSWBJT7xlEq27xWcgwtqZLJGYaNOsJ3sslOlxq3IrRr9i1CJiktWIbaGtetaDL4BBDFSkjx7Z91KnAg",
        "public_key": "bMUigy8O0jOnBxQ4Sc-5lwhIZ8LQVAhxMbR7qESVuUE",
        "signer_path": "lakehouse/data-extract/v1",
        "alg": "Ed25519",
        "signed": true
      }
    },
    "written_at": "2026-09-02T22:41:08.666Z"
  },
  "cited_facts": [
    {
      "statement": "X users are reportedly receiving multiple password reset confirmation emails en masse, allegedly triggered by hackers attempting to access their accounts.",
      "source": "Mashable",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T06:50:38.000Z",
      "publisher_count": 1,
      "sources": [
        "Mashable"
      ]
    },
    {
      "statement": "X product engineer Mridul Singhai posted on 2026-09-01 that X was investigating user complaints about unsolicited password reset emails, attributing the attempts to attackers who believe X Money's wide availability gives them a chance to gain unauthorized access, and said no evidence of breaches had been found.",
      "source": "TechCrunch",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T20:48:32.000Z",
      "publisher_count": 1,
      "sources": [
        "TechCrunch"
      ]
    },
    {
      "statement": "Some users claim that follow-up phishing emails are being sent out amidst the X password reset confirmations, disguised as legitimate emails from the platform.",
      "source": "Mashable",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-02T06:50:38.000Z",
      "publisher_count": 1,
      "sources": [
        "Mashable"
      ]
    },
    {
      "statement": "Numerous X users reported receiving unsolicited password reset emails following the launch of X Money, according to the article's reporting.",
      "source": "TechCrunch",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T20:48:32.000Z",
      "publisher_count": 1,
      "sources": [
        "TechCrunch"
      ]
    },
    {
      "statement": "X Money is X's newly launched payments service that includes a bank card and other benefits, designed to make it easier for creators to collect payments on the platform.",
      "source": "TechCrunch",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T20:48:32.000Z",
      "publisher_count": 1,
      "sources": [
        "TechCrunch"
      ]
    },
    {
      "statement": "Users are warning each other to enable two-factor authentication, if not already enabled, to protect their accounts during the incident.",
      "source": "TechCrunch",
      "instrument": "News",
      "claim_key": null,
      "published_at": "2026-09-01T20:48:32.000Z",
      "publisher_count": 1,
      "sources": [
        "TechCrunch"
      ]
    }
  ],
  "note": "A signature proves who filed this and that it has not changed since. It never makes a claim true."
}