Lately we've had reports of scammers setting up an EarthLink mailbox with an official sounding name like "firstname.lastname@example.org" or something similar. Then they send out email to all the earthlink addresses they can find (or randomly hit) asking you to "confirm" your account information by sending back your password. They are very clever at making the email look and sound official.
NEVER ever send your password to anyone in an email. EarthLink will never ask any user to do this under any circumstances. If you are ever asked for information like this in an official-looking email, it is a scam, 100% of the time. Do not reply to the message. Once the scammer has your password, they usually begin sending out spam from your account, thus hiding their own identity. This also can result in your own access being suspended due to no fault of your own, and your account can be turned off until you call in and get it straightened out.
When we get these reports or we catch them through our own monitoring, we immediately shut down the scammer accounts. But beware, as scammers are persistent and will keep trying, and we usually can't catch them until after some damage is done. Always safeguard your account information, particularly your password.
If you think you might have been a victim and need to change your password, just click on My Account at the top of any EarthLink web page. Log in there, select the email profile you need to update, and click on the Edit link beside Password. Change it to something new that is known only to you.