AT&T Subscribers Report Unexpected Password Change Alerts

The messages arrived by both text and email, and several of them appeared to go out at roughly the same time, the publication reported. The alerts told recipients that their password had been updated, even though they had not made the change themselves.

The reports surfaced on Reddit's AT&T community forum, where subscribers described waking up to the messages in the early hours of the morning. Android Authority said it had spotted a spate of such posts describing the same experience.

As of the publication's report, there was no indication that any account had actually been compromised. Android Authority said the situation did not currently look like a breach and that there was no immediate cause for alarm, while cautioning that the matter was still unconfirmed. The publication said it had reached out to AT&T for confirmation.

What produced the notifications was not immediately clear from the reports. A mass password reset, a system error or a notification glitch would each produce similar messages, but none of those explanations has been confirmed by the carrier or by the users who posted about the alerts.

For subscribers who received the messages, the practical question is whether their credentials remain valid. Until AT&T responds, the reports remain a collection of user accounts rather than a verified incident, and the publication's guidance was that recipients should not panic yet.

The episode echoes a recurring pattern in which authentication-related notifications sent at scale prompt concern among customers, particularly when they arrive outside normal hours and reference a security-sensitive action. In this case, the only confirmed facts are that the messages were sent, that they arrived by two channels and that they clustered in time.