Should you obtained a bunch of password reset requests from Instagram not too long ago, you're not alone. Malwarebytes, an antivirus software program firm, initially reported that there was an information breach revealing the "delicate info" of 17.5 million Instagram customers. Malwarebytes added that the leak included Instagram usernames, bodily addresses, cellphone numbers, electronic mail addresses and extra. Nonetheless, Instagram stated there was no breach and that consumer accounts have been "safe."
We fastened a problem that allow an exterior social gathering request password reset emails for some folks. There was no breach of our methods and your Instagram accounts are safe.
You possibly can ignore these emails — sorry for any confusion.— Instagram (@instagram) January 11, 2026
In Malwarebytes submit, the corporate added that the "knowledge is obtainable on the market on the darkish internet and might be abused by cybercriminals." Malwarebytes famous in an electronic mail to its prospects that it found the breach throughout its routine darkish internet scan and that it's tied to a possible incident associated to an Instagram API publicity from 2024.
The reported breach has resulted in customers receiving a number of emails from Instagram about password reset requests. In keeping with Malwarebytes, the leaked info might result in extra severe assaults, like phishing makes an attempt or account takeovers. In response, Instagram posted on X that customers can ignore the latest emails requesting password resets.
"We fastened a problem that allow an exterior social gathering request password reset emails for some folks," Instagram's submit on X learn. "There was no breach of our methods and your Instagram accounts are safe."
Whereas Instagram stated this isn't an information breach, its dad or mum firm has been in scorching water for knowledge breaches previously. Should you haven't already, it's at all times a good suggestion to activate two-factor authentication and alter your password. Even higher, you’ll be able to evaluation what gadgets are logged into your Instagram account in Meta's Accounts Middle.
Replace, January 11, 2026, 11:10AM ET: This story and its headline have been up to date with Instagram's assertion that was posted on X.
This text initially appeared on Engadget at https://www.engadget.com/cybersecurity/instagram-says-accounts-are-secure-after-wave-of-suspicious-password-reset-requests-192105188.html?src=rss