Twitter disables some users after password reset ‘incident’

Twitter reports a problem with the password reset system. The platform has decided to preemptively disable certain users. An additional incident in an already difficult context.

Twitter just unveiled an “incident” that affected the accounts of an unspecified number of users who decided to reset their passwords. According to the company, a “bug”that appeared sometime last year prevented users from logging out of their accounts on all devices after running the password reset procedure.

Twitter reveals password reset incident

“If you changed your password on one device, but the session was still open on another device, that session might not close,” Twitter explained in a brief blog post. “Web sessions were not affected and closed properly.”

Twitter explains that it has “preemptively”disabled some users due to this bug. The company attributed the problem to “a change in systems that handle password resets”that happened in 2021. “I can say that for most of them, this would not cause any problems or compromise any account,” he said.

The platform decided to preemptively disable certain users

While Twitter claims that “most of them”accounts would not have been compromised, news of the incident may be of concern to those who used shared devices or lost a device or got into trouble after being stolen last year.

An additional incident in an already difficult context

The disclosure of the incident to Twitter comes after the company is still reeling from accusations that its former chief security officer filed a lawsuit accusing the company of “gross negligence”in its security practices. Twitter has not yet responded to this, apparently preferring to focus on the ongoing lawsuit with Elon Musk. The latter uses whistleblower allegations in his case to evade his $44 billion takeover bid.

CDN CTB