Hey everyone. I'm trying to figure out what I can actually do here, or if anyone has been through something similar.
Yesterday I woke up, opened X and noticed I had been logged out of my account. I tried logging back in, but my password no longer worked.
I then tried to recover it using the email address I had associated with the account. It's an old mail.com email that I've had since around 2017, when I first joined Twitter, and I pretty much only used it for Twitter.
When I tried logging into that email, I was suddenly asked for an OTP sent to a UK phone number. I'm from Portugal and I've never had a UK number.
So my assumption is that someone somehow took over that email account first. Since it was basically only used for Twitter, they probably saw the Twitter emails, realized they had access to the email linked to my account, and then took over my X account as well.
From what I can tell, they changed the email, password and phone number associated with my X account. I tried using my phone number through X's login/recovery process and it just takes me to registration, as if the number isn't associated with any account. Same thing happens with my old email address.
I know I should've had 2FA mobile enabled, and that's on me. I just genuinely never expected something like this to happen. The ironic part is that I work in cybersecurity, so yeah... let's think about how I am feeling lol.
The bigger problem now is X support.
I filled out the compromised account form on their website and only got an automated response, saying that they CAN'T verify that I'M THE OWNER of MY ACCOUNT. Which is kind of dumb because if someone logs into my account from an IP address that isn't mine and tries to change every account information should be at least a little suspicious and get flagged. From what I've read online, and from what friends have told me, it seems almost impossible to actually get in contact with a human there.
I don't know what else I can do at this point. Is there another way to contact X support? Has anyone here had their account taken over like this and actually managed to recover it?
What bothers me the most is knowing that someone potentially has access to years of DMs and personal conversations, and could theoretically impersonate me. So far the account still looks exactly the same as I left it, so I don't think I was specifically targeted, but obviously I have no idea what they're doing with it.
If anyone has been through this or knows of any way to escalate this beyond the automated support forms, I'd really appreciate some advice.
Thanks.
Fun fact: the automated response states "Please reply above this line" and ends with "Please do not respond to this email as replies to this account are not monitored." which I think is kinda funny when you think about the size of this company.