Root Account Hacked and Email Changed

Question

Hello,

I created my AWS account for a personal school project. However, it has now been hacked and the email has been changed. So I cannot access it anymore. I am afraid of what the hacker may do and the billing it may charge me. I don't know how long I have to wait, but it has been hours since I have been waiting in support chat. Can I get help as soon as possible?

Thank you.

Answer

Hello AWS Customer,

I think it's important that you report suspected abuse to get this out of the way as soon as possible.[[1]](https://support.aws.amazon.com/#/contacts/report-abuse/?cu-additional-resource)

And also, you can send reports of abuse of other Amazon Web Services to abuse@amazonaws.com, making sure to include as much identifying information as possible. Please kindly note that Amazon Web Services will not open any attachments.

Please let me know if you have any further questions or concerns. I will be more than glad to assist you.

Best regards,  
Jisoo K.

Answer

This happened to my Business account. I had to create a new personal account and start a contact us chat. I provided them the account number for the hacked account and informed them that I did not authorize a root email change. I provided them with the previous email and the email it was changed to that was provided by the change notice email received. They submitted to the security team and within an hour the email was changed back. Ensure to activate MFA after this to prevent future attacks.

Root Account Hacked and Email Changed

Relevant content