Instagram Addresses Unusual Password Reset Emails, Confirms No Security Breach
In recent days, numerous Instagram users have reported receiving unexpected password reset emails, raising concerns about a potential security breach. However, Instagram has officially stated that there has been no compromise of user data.
The situation gained attention following a post by antivirus company Malwarebytes on Bluesky. Malwarebytes shared a screenshot of an email from Instagram notifying users of a password reset request. The company alleged that cybercriminals had stolen sensitive information from 17.5 million Instagram accounts, including usernames, physical addresses, phone numbers, and email addresses. They further claimed that this data was available for sale on the dark web, posing significant risks to affected users.
Contradicting these claims, Instagram addressed the issue on X (formerly Twitter), stating that they had fixed an issue that let an external party request password reset emails for some people. The company did not provide specific details about the external party or the nature of the issue but assured users that they could disregard the unsolicited password reset emails. Instagram apologized for any confusion caused by the incident.