Instagram Confirms No Breach After Wave of Suspicious Password Reset Requests
A recent surge in password reset requests from Instagram users has raised concerns about a potential data breach, but the platform has assured its users that there is no evidence of such an incident. According to Malwarebytes, an antivirus software company, 17.5 million Instagram user accounts were allegedly compromised in a data leak, exposing sensitive information including usernames, physical addresses, phone numbers, and email addresses.
However, Instagram has denied any breach, stating that user accounts are "secure" and that the recent password reset requests were an isolated issue. In a statement posted on X, the platform explained that an external party had managed to request password reset emails for some users, but emphasized that there was no breach of its systems.
The leak allegedly originated from a potential incident related to an Instagram API exposure in 2024. Malwarebytes claimed that it discovered the breach during a routine dark web scan and warned that the leaked information could be used by cybercriminals to launch more serious attacks, such as phishing attempts or account takeovers.
As a result, users who received password reset requests are advised to ignore them, while Instagram has encouraged its users to turn on two-factor authentication and review their account security settings.
A recent surge in password reset requests from Instagram users has raised concerns about a potential data breach, but the platform has assured its users that there is no evidence of such an incident. According to Malwarebytes, an antivirus software company, 17.5 million Instagram user accounts were allegedly compromised in a data leak, exposing sensitive information including usernames, physical addresses, phone numbers, and email addresses.
However, Instagram has denied any breach, stating that user accounts are "secure" and that the recent password reset requests were an isolated issue. In a statement posted on X, the platform explained that an external party had managed to request password reset emails for some users, but emphasized that there was no breach of its systems.
The leak allegedly originated from a potential incident related to an Instagram API exposure in 2024. Malwarebytes claimed that it discovered the breach during a routine dark web scan and warned that the leaked information could be used by cybercriminals to launch more serious attacks, such as phishing attempts or account takeovers.
As a result, users who received password reset requests are advised to ignore them, while Instagram has encouraged its users to turn on two-factor authentication and review their account security settings.