Security Issue

• 

  bookfoxeditor · Member · May 23, 2022 at 5:18 pm

  • Copy link
  • Add topic to favorites

  Someone started a blog without my permission. I got dozens of emails over the weekend saying that a blog had been started under this account, and I did not do it.

  WP.com: Yes
  Correct account: Yes

  The blog I need help with is: (visible only to logged in users)

• 

  helper-heroponriki · Member · May 23, 2022 at 6:15 pm

  • Copy link

  Hi there!

  Please do not create duplicate threads. I’ve removed your other post and will respond to you here.

  It looks like you had an old WordPress.com account (from 2018) without any sites. I’ve now deleted the spam site, cleared out your account’s active sessions, and noted this for our team. We’ve already taken steps against the specific spam that this site was created for, and have been monitoring it closely.

  Here are some next steps to secure or close your account.

  – Reset your password at this link.

  – When you change your password, choose a strong one. This often happens because a password used on WordPress.com was also used on another site that had its email/password pairs leaked. If you use this password anywhere else, consider changing those too.

  – Consider setting up two-step authentication. This can be set up so that you’re texted or notified via the WordPress app every time there’s an attempted login.

  – If you prefer, once you get into it, you can close your account instead.

  Let us know if you have any questions.