WP being hacked?

• 

  laurenatcbs · Member · May 7, 2015 at 5:31 pm

  • Copy link
  • Add topic to favorites

  Hi friends,

  One of our users has received a verification code randomly while already being logged in. We are concerned that someone is trying to hack into her WordPress. Is WP just trying to add an extra layer of security, or should we be concerned?

  The blog I need help with is: (visible only to logged in users)

• 

  timethief · Member · May 7, 2015 at 5:41 pm

  • Copy link

  Who is this user?
  What is WordPress.COM her/his username account?
  Why is she/he not posting here for assistance?
  Please have her/him do that now.

  I tagged this thread for Staff assistance. Please subscribe to it so you are notified when they respond. To subscribe look in the sidebar of this thread, find the subscribe to topics link and click it.

• 

  alexjgustafson · Member · May 7, 2015 at 5:50 pm

  • Copy link

  It is possible that someone was attempting to login as them and got to the two-factor authentication code process. Without access to that code, they would not have been able to login fully, that is the security two-factor authentication offers.

  I’d recommend your user login and change their primary password. Their two factor authentication codes will still be fine so no changes needed there, unless someone else has access to their phone.

  It would be best to have them login and reply here if there are more concerns. It’s easier to handle these issues directly, and with them replying on their own account I can send an email privately.

  Best,

  -Alex G.

• 

  ksfmpromotions · Member · May 7, 2015 at 6:10 pm

  • Copy link

  I am being told to respond… so I am.

• 

  timethief · Member · May 7, 2015 at 6:15 pm

  • Copy link

  Thanks so much for logging in and posting here. Please read and act on what alexjgustafson Staff posted above.