Someone Has Hacked My Account

  • Unknown's avatar

    Someone has hacked by other wordpress.com (tnixon16). They’ve changed my password, and apparently created an additional user (tnixon16324534180), which is where my password reset emails are going. But that second user doesn’t have ownership of the site I’m trying to admin, which is http://www.jesgru.com. Help!

  • Unknown's avatar

    Hi there,

    I’ve tagged WordPress.com staff to check for suspicious activity and to see if they can offer any advice, or just recommend following the Account Recovery process: https://en.support.wordpress.com/account-recovery/

    In future though, please ensure you select a strong password: https://en.support.wordpress.com/selecting-a-strong-password/

    I’d also suggest highly recommend using 2 Step Verification: https://en.support.wordpress.com/security/two-step-authentication/

    Consider disabling or changing your Post by Email address, but most importantly, ensure that nobody knows it: https://en.support.wordpress.com/post-by-email/

    Also, ensure you turn on two step authentication on your email – I can’t stress enough how important that can be, regardless of what other services you use. If you need help with doing that, let us know your email provider and we’ll try to assist.

    This will help keep your account very secure, in the future but in terms of this incident, I’m tagging staff to see if they can check for suspicious activity and offer further advice.

    Let us know if you have any further questions or issues. :)

  • Hi there,

    Your account for tnixon16 has not been hacked. The password was changed by our system as a security precaution about a month ago. We sent an email to the address on file for the account to notify you of the change at that time.

    There has been no other changes to that account. The reason you’re not receiving the password reset emails, and why you likely did not receive our email a month ago, is because that email address apparently no longer exists – all our emails are bouncing back with a “No such user” error message from the email provider.

    So in this case you’ll need to follow our account recovery process outlined in the link above to verify your account ownership and regain access to the account.

    apparently created an additional user tnixon16324534180

    There is a tnixon16324534180 account on WordPress.com, but that account was only created yesterday, minutes before you posted this forum thread, and judging by the email address, you created that account.

    Our logs also show that five hours after you posted this thread, tnixon16 transferred ownership of a site to tnixon16324534180. Does that mean you were able to get back into the tnixon16 account?

    If so, please make sure you also update the email address on that account, or you might find yourself locked out again in future.

  • The topic ‘Someone Has Hacked My Account’ is closed to new replies.