Password reset requests, site issue or something sinister?

[FiF]

Yesterday evening was locked out of PH. Couldn't login or do anything other than read.

Looking at my login mail I had received multiple notifications of password reset requests from
[e-mail]

Clearly I had not requested any of these, not even been on adverts, no idea why. They indicated my password had been disabled.

Trying to reset the password was impossible.

Today all is well. Site glitch or something sinister both of us need to know about and take action?

[anonymous-user]

I got locked out for a while, where there was some kind of crash or error every time I tried to get on.

Would appreciate some feedback from the mods if there's anything I need to check or be wary of?

[Scrump]

The mods don’t have more info on this than you do.
Hopefully the techies will let us know why the hamsters were allowed to take Friday evening off.

[FiF]

Well it's just happening again, two more requests in last few minutes, four more this morning. Have emailed [e-mail] albeit not by clicking reply. Going to fire up another device and look at email header.
BRB

[FiF]

Looks like some phishing mails from Christ knows where.

Where do I send the header info? And which bits?

[Big Al.]

I've just flagged this up to the techies via mail, currently awaiting a reply.

[FiF]

Do you want a PM with the mail header info?

[FiF]

Sorry one more thing, it all started up again after I posted about it on PH. Is it someone being a dick? If so nuke them from orbit please.

[anonymous-user]

There are perhaps four of us who've been posting on the same thread who've had access issues last night, for me maybe 11ish.
Coincidence?

Thank you Al.

[Scrump]

There are other users who don’t post in that thread who also had access issues last night.

[FiF]

Techies are on it, have sent mail header and source data.
Started with 16 mails on October 9, another 8 on Sunday, 11 on Thursday, and so far 6 today.

[Big Al.]

RacingPete is on the case.

[RacingPete]

Just to update on here.

We had a separate issue with the database that we use for logins, nothing security related, just it wasn't serving requests and you would have had issues logging in last night - this is now fixed.

The email password reset looks like someone messing around and being annoying, thanks FiF for the email headers will investigate on Monday if we can link up the email requests with an IP posting on the site and take appropriate action.

[Big Al.]

Thanks Pete.

[Google [bot]]

I just received 9 password reset emails.

[Craikeybaby]

When I signed in to PH earlier I had an alert on my iPhone that my (since updated) password had been exposed in a leak. The thing is that since the great HTTPS debacle a few years back, I have been using a unique password for PH, so I was surprised to see it included. I am assuming it must have been sniffed before PH set up HTTPS.

[Condi]

Google [bot] said:

I just received 9 password reset emails.

I got 16

What do I win?

[Condi]

Just had another 3 password request emails.

Have changed the password to something a lot stronger, but I have no idea why anyone would want to hack a PH account?!

[voyds9]

Condi said:

Just had another 3 password request emails.

Have changed the password to something a lot stronger, but I have no idea why anyone would want to hack a PH account?!

Luck you I've just had 10 reset requests, also updated mine to something a lot stronger

[FiF]

I'll just say one thing, the last change password requests received a week or so ago were shortly after telling a certain duvet friendly poster to jog on. Take from that what you will, there may be zero connection and simply an unfortunate coincidence..