has X admitted a data breach yet? cause one def happened. i'm getting phishing emails to my connected email which has never happened before.
34
18
550
186,968
Replying to @nic_carter
Are you using Gmail for that? How do you know your Google account hasn鈥檛 been compromised the phishing may be part of a long-term automated attack. Don鈥檛 ordinary phishing emails go to spam, how are you even seeing them unless this is spear phishing targeting you specifically.
BITCOIN HOLDER LOSES $750K IN BTC AFTER GOOGLE ACCOUNT HACK A longtime Bitcoin holder reportedly lost roughly $750,000 less than 12 hours after moving his BTC to a major Australian exchange. According to a close friend, hackers had compromised his Google account for roughly three months, gaining access to his email and cloud-backed Google Authenticator credentials. They waited for him to deposit BTC on an exchange. When he finally did, the attackers accessed the account and withdrew everything. The exchange believed it was the legitimate owner and approved the withdrawal. The victim reportedly woke at 3 a.m. to a notification saying his withdrawal had been approved. One major security takeaway is to disable cloud backup on Google Authenticator. If your Google account is compromised, synced authentication codes can become another point of attack. Hardware security keys such as YubiKeys offer stronger protection because authentication still requires possession of the physical key. Setting up two keys provides a backup if one is lost.

Aug 26, 2026 路 12:30 AM UTC

1
2,013
Sort replies: Relevant Recent Liked
Seperate email with each service via catch-all or something like Simplelogin/Anonaddy. As for the quoted tweet seperating your mfa, password manager and email is always a good practice.
26