BT Email customers have reported being deluged with unsolicited password reset PIN messages, with some receiving hundreds and one claiming to have had over 1,000 arrive in rapid bursts. BT says it is investigating the cause but insists affected accounts remain secure, though the scale and unexplained nature of the flood have unsettled customers and raised questions about whether it reflects malicious activity or a system fault.

Reports surfaced on BT's community forums over the weekend, with customers describing 50 to over 500 PIN texts or emails arriving within minutes, often in repeated bursts throughout the day. BT has told users to ignore the messages and stay alert for suspicious activity, but has not clarified the cause, and one customer separately claims their account was compromised overnight during the barrage, though this is unverified. The Register has asked BT for details on the number of customers affected, possible malicious activity, and what rate limiting applies to reset requests.