My WordPress account was hacked

• 

  chantal · Member · Jul 20, 2016 at 11:01 am

  • Copy link
  • Add topic to favorites

  I created two personal wordpress websites at wordpress.com over ten years ago. I rented my own domain and hosting, forgot about them and discontinued use of the associated email address. Recently I cleaned that old mailbox and it was filled with password requests from WordPress.com. Literally every day a password reset email was requested by somebody else. In my WordPress.com site admin, two new sites were created by an unknown user, who somehow gained access to my control panel. Now, this person is trying to reset the password again and again, and due to two step authentication (which I enabled recently) I am getting text messages on my phone. Can anyone explain how this happened and let me know how I can resolve this? As far as I can see, this other user has been able – for at least some time – to use my account as his or her personal account and created sites from my account.
  Thanks in advance for the advice!
  Merel

  The blog I need help with is: (visible only to logged in users)

• 

  chantal · Member · Jul 21, 2016 at 6:48 am

  • Copy link

  Hi, additionally to the sites I created (chantal.wordpress.com), somebody else created new sites from inside my Dashboard. So this person is now trying to access his or her sites, that are accessible only from my dashboard. A bit confusing? I thought so too!
  This is what I mean with my wordpress account was hacked, NOT my website…