Hi r/help,
I am the owner of u/ChipsAhoy21 (May 2015, verified email). I wanted to put the timeline in one place in case a moderator or admin can take a look. I already went through password reset. That part is not the question.
On Friday 23 Oct, from about 10:12 AM to 6:10 PM PT (17:11 UTC through 01:10 UTC on the 24th), someone used a stolen session on this account. They put up 319 spam posts and 11 comments from 45.134.92.34. That IP has never shown up in my Reddit login history. My password still worked, which is how I got back in.
Once I was in, I deleted all of that spam, hid the chat threads from that window, and left the NSFW communities they used. I also filed Help Center tickets for the compromise and to have the NSFW tag taken off the profile.
This afternoon (26 Oct) I was signed out of every device. Login says the password is wrong. I get the reset email, I set a new password, and that password is still rejected. I have tried the newest link, typing it by hand, and signing in with the username rather than the email.
The public profile is still there, so this does not look like a . I just cannot log in.
If someone on staff can lift whatever lock is on u/ChipsAhoy21 and restore login to the email already on the account, I would really appreciate it. Happy to send the IP, timestamps, and ticket details in modmail.
Thanks,
u/ChipsAhoy21