Unauthorized Access to My Account

  • Unknown's avatar
    cherylschwa · Member ·

    Hi I need help deleting all of the content on my site because I do not have the ability to remove the pages that were added by someone who has been in my account. I got emails today that I was ‘one step away’ from launching my site. I have not touched this account in months. I believe I accidentally made the page when I set up my gravitar because the web designer we were using at the time was a putz and didn’t accurately describe what we needed. I would like to keep the account because it may be linked to my company’s website and I don’t want to jump through hoops to set up anything critical that might get deleted in the process.

    a) I need the site’s content to be deleted because someone is trying to launch a food blog with it and use my account to pay.

    b) I need to be logged out of ALL instances now that I have changed my password and set up two-factor auth.

    I can’t do this myself and I can’t find any direct support lines so hopefully this is the right place to request this.

    Thank you for your helo in advance.

    Site: (email visible only to moderators and staff).
    WP.com: Yes
    Correct account: Yes

  • staff-totoro · Staff ·

    Hi there,

    a) I need the site’s content to be deleted because someone is trying to launch a food blog with it and use my account to pay.

    You are referring to https://cherylschwa.wordpress.com/ yes?

    To clarify, you are trying to start a Gravitar account (to connect that to another site you participate in) but are NOT trying to start a new WordPress.com site, yes?

    https://cherylschwa.wordpress.com/ is populated by demo content (the theme it uses is for food bloggers) and I suspect that it was a site that you may have created by mistake, since Gravatar is linked to WordPress.com account. The site itself though has no activity on it, and as I mention is populated with starter content that anyone would see when starting a new site on our service.

    So from that standpoint I can confirm there has been no unauthorized access to your account. Apologies for any confusion!

    If you wish to delete https://cherylschwa.wordpress.com/ but keep this account open (so your Gravatar continues to function) you can do so by following the steps here: https://wordpress.com/settings/delete-site/cherylschwa.wordpress.com

    Hope that helps. Please let us know if you have any more questions.

  • Unknown's avatar
    cherylschwa · Member ·

    Thank you for your response, but unfortunately, that’s not the problem. Upon further investigation, yes, that is the URL in question and yes it appears it was populated by demo content. However, that was not me. I did not make those changes. I have never clicked on any demo content or themes or applied them. I simply had the account there with the options to create as a result of creating the Gravatar account.

    This Gravatar was created back in the Fall of 2020. The most recent activity, such as applying the template and attempting to purchase a subscription was today early this morning and it was not me. When I logged in a subscription was in the cart. They couldn’t get anywhere because I have no payment information linked to this. I got four emails today in regards to setting up my WordPress. Unless I was getting random strings of spam, one of which was “Oops, did you forget this important step?” this means someone was futzing around.

    Please log me out of all instances of this account or direct me to where I can see what devices are logged in. Everything else should be fine since I changed the password and enabled two-factor auth. I can deal with deleting the content myself, I just want to confirm no one has the ability to change my password or make additional changes. Thank you.

  • staff-mckluskey · Staff ·

    I have logged you out from all opened sessions – there have only been two web sessions, no devices were connected. As staff-totoro mentioned, there has been no unauthorized access to your account.
    You only need to follow a couple of steps to create a site with demo content, and you’d receive the emails you mentioned when you abandon the process without launching it.

    In any case, as I said, I have logged you off from the two open sessions, and if you change your password and enabled two-factor authentication, you should be okay.

  • Unknown's avatar
    cherylschwa · Member ·

    Thank you both for your help, I appreciate the responses and action.

  • The topic ‘Unauthorized Access to My Account’ is closed to new replies.