Account compromised

• 

  woe2you · Member · May 22, 2022 at 10:15 am

  • Copy link
  • Add topic to favorites

  Overnight I received messages about a new site at 5f9r2pztcybqxdvl.wordpress.com being created.

  I’ve:

  1. Reset my password
  2. Enabled 2FA
  3. Deleted the site

  If I could do it without affecting anything I actually use like Gravatar I’d prefer to delete the account entirely, but I gather that’s not possible.

• 

  staartmees · Member · May 22, 2022 at 10:49 am

  • Copy link

  Staff is aware of this situation abd is investigating what’s going on.

• 

  staff-mckluskey · Staff · May 22, 2022 at 2:41 pm

  • Copy link

  Hi there!

  You did the right thing, @woe2you.

  If you used the same password here on WordPress.com/Gravatar as on any other website – I’d suggest you update it there as well. It sounds like your password (not your WordPress.com account) might have been part of a security breach on some other service; you can check it at https://haveibeenpwned.com/.