# I need your help guys ( My 2010 X account was hacked) **URL:** \ **Category:** Discussion & Solutions\ **Tags:** solved\ **Created:** [Août 5, 2026, 6:19 UTC](https://onehack.st/t/i-need-your-help-guys-my-2010-x-account-was-hacked/324434 "2026-08-05T06:19:39Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![davids\_whales](https://onehack.st/user_avatar/onehack.st/davids_whales/32/171810_2.png) [@davids\_whales](https://onehack.st/u/davids_whales)\ **Post date:** [Août 5, 2026, 6:19 UTC](https://onehack.st/t/i-need-your-help-guys-my-2010-x-account-was-hacked/324434/1 "2026-08-05T06:19:40Z")
My main account, which I opened in 2010, was hacked since July 19, and the person changed the email as well… Is there any way to find out who did that? THIS is the EMAIL that did this to me [juan\_ram\_bigg-e@hotmail.com](mailto:juan_ram_bigg-e@hotmail.com) After much back and forth with X, this is what I was told, as can be seen in the image below ADMIN! I need your help to approve this post, as I need to understand what can be done to retrieve the account or at least know the user behind this attack. ![Screenshot 2026-08-05 at 5.43.03 AM](https://onehack.st/uploads/default/original/3X/9/d/9d8f14f435441b5de90cce23a48f49c0fef3d10d.png) ---
**Author:** ![WhiteHat](https://onehack.st/user_avatar/onehack.st/whitehat/32/162514_2.png) [@WhiteHat](https://onehack.st/u/WhiteHat)\ **Post date:** [Août 6, 2026, 2:13 UTC](https://onehack.st/t/i-need-your-help-guys-my-2010-x-account-was-hacked/324434/2 "2026-08-06T14:13:31Z")
![stolen @handle stamped FROZEN, DMCA, CASE# — and traced](https://onehack.st/uploads/default/original/3X/b/2/b287e14494c663a8b7137eaeae417269706cb11f.jpeg) X’s _“we can’t verify you as owner — make a new account”_ is a **tier-1 form letter, not a verdict.** Almost everyone gets it; it’s beatable — and even if X drags its feet, you can make that stolen 2010 handle **worthless and traceable.** Here’s the 3-front plan. Most of it needs **no login**. > ⏱ **Do this in the next 10 minutes** _(before the thief scrubs your name + photos)_ → [archive.today](https://archive.today/) → paste `x.com/YOURHANDLE` → **Save**. A dated snapshot of the account still wearing **your** face is your #1 evidence for everything below. Repeat on [Wayback → Save Page Now](https://web.archive.org/save). * * * ### 🔑 FRONT 1 — beat the auto-deny _(re-attack, don’t just retry)_ The generic “forgot password” is the dead end you already hit. File the **specific hijack routes** , each with a fat proof bundle: ├─ 💎 [Hacked / compromised account form](https://help.x.com/en/forms/account-access/regain-access/hacked-or-compromised) — the real appeal, **works while locked out** ├─ [Can’t-access-my-email flow](https://help.x.com/en/managing-your-account/cant-access-my-accounts-email-address) · [2FA-problem form](https://help.x.com/en/forms/account-access/regain-access/2fa-problem) — for the email/2FA the thief changed └─ **Proof X’s appeal secretly weights** → the **2010 creation date + @handle** , any **email/phone EVER linked** , **X Premium / payment receipts** , **connected apps** , old **login IPs** , and the big one — **a phone/SIM still in your hands** (X’s own reply hinted it: _“contact your service provider”_). Pull your [2010 Wayback profile snapshot](https://web.archive.org/web/2010*/twitter.com/YOURHANDLE) to prove you held the handle 15 years ago. ### ⚖ FRONT 2 — levers with legal teeth _(skip tier-1 entirely)_ ├─ 💎 [Request your account info — DSAR / GDPR](https://help.x.com/en/forms/privacy/request-account-info/me) — X **must** answer (~30 days) with your creation date, **every email/phone ever linked + login IPs** = your ownership proof **and** a lead on the thief ├─ 💎 [Impersonation report](https://help.x.com/en/forms/authenticity/impersonation) — **no login needed** ; a 2010 handle still running your name/photos _is_ impersonation → confirmed reports get it **suspended** _(the prize becomes a dead account)_ ├─ 💎 [DMCA takedown](https://help.twitter.com/forms/dmca) of your stolen profile pic + header — and if the thief counter-files to keep them, **X forwards you their real name + mailing address** └─ [FTC IdentityTheft.gov](https://www.identitytheft.gov/) → spits out an **official identity-theft report** you staple to every form above. ### ⚔ FRONT 3 — unmask + corner them _(lawful — for the report, not revenge)_ > 🎯 **The realistic win isn’t X reversing — it’s a police case number that subpoenas the truth.** - 🕵 Feed the hacker’s `juan_ram_bigg-e@hotmail.com` to [Epieos](https://epieos.com/) + [Holehe](https://holehe.online/) + [HIBP](https://haveibeenpwned.com/) + [Gravatar](https://oxint.io/tools/gravatar/) → linked accounts, a name, maybe a face; run the @handle through [WhatsMyName](https://whatsmyname.dev/). _(Silent look-ups — to identify for the report, never to contact.)_ - 🛒 A stolen OG 2010 handle almost always gets **flipped** — watch [SWAPD](https://swapd.co/c/social-media/buy-sell-twitter-accounts/37) + [OGUsers](https://oguser.com/Forum-OG-Twitter-Usernames); the listing exposes the seller **and** is evidence. - 📮 File [FBI IC3](https://complaint.ic3.gov/) (US) or your country’s cyber-crime portal → hand the case number to **[X’s legal / preservation portal](https://legalrequests.x.com/)** + **[Microsoft’s LE portal](https://leportal.microsoft.com/)**. Police _preservation → subpoena_ is the ONLY lawful route to the email-change records + IPs that **name** them. ⏳ preservation expires — file fast. > **🔵 Heavy artillery if X still stonewalls — EU / legal escalation** > > - 💎 [X Data-Protection Officer inquiry](https://help.x.com/en/forms/privacy/question) — lands in X’s **legal/DPO queue** (statutory deadlines), not the tier-1 reps who told you to make a new account > - 💎 [ADROIT — DSA-certified dispute body](https://adroit.legal/file_a_complaint/) — an Article-21 body that **accepts X** ; X is legally bound to engage, it’s free, and these routinely overturn platform decisions _(file X’s own in-app DSA appeal first, then escalate here)_ > - [Microsoft scam/abuse report](https://www.microsoft.com/concern/scam) on the hotmail · [X law-enforcement guidelines](https://help.x.com/en/rules-and-policies/x-law-enforcement-support) (print it, hand it to your officer) · [X “Contact us” forms hub](https://help.x.com/en/forms) ⚠ **Straight talk:** X almost never hand-reverses a “can’t verify” denial — so don’t bet on one magic form. Bet on the **stack** : the DSAR + the impersonation freeze + a police subpoena is what actually moves the needle, and **a phone you still hold is your single best recovery card.** Run all three fronts in parallel, today, under one case number. _You can’t out-argue a form letter — but a stolen handle that’s frozen, DMCA-stripped, and sitting in a police file stops being worth stealing._ ---
**Author:** ![davids\_whales](https://onehack.st/user_avatar/onehack.st/davids_whales/32/171810_2.png) [@davids\_whales](https://onehack.st/u/davids_whales)\ **Post date:** [Août 7, 2026, 8:37 UTC](https://onehack.st/t/i-need-your-help-guys-my-2010-x-account-was-hacked/324434/3 "2026-08-07T08:37:43Z")
Thank you so much, White hat! Just came online and am reading through this…