Instagram says accounts ‘are safe’ after wave of suspicious password reset requests

In the event you obtained a bunch of password reset requests from Instagram not too long ago, you are not alone. Malwarebytes, an antivirus software program firm, initially reported that there was an information breach revealing the “delicate info” of 17.5 million Instagram customers. Malwarebytes added that the leak included Instagram usernames, bodily addresses, telephone numbers, electronic mail addresses and extra. Nonetheless, Instagram said there was no breach and that person accounts had been “safe.”

In Malwarebytes submit, the corporate added that the “knowledge is out there on the market on the darkish net and could be abused by cybercriminals.” Malwarebytes famous in an electronic mail to its clients that it found the breach throughout its routine darkish net scan and that it is tied to a possible incident associated to an Instagram API publicity from 2024.

The reported breach has resulted in customers receiving several emails from Instagram about password reset requests. In response to Malwarebytes, the leaked info may result in extra severe assaults, like phishing makes an attempt or account takeovers. In response, Instagram posted on X that customers can ignore the latest emails requesting password resets.

“We fastened a difficulty that permit an exterior get together request password reset emails for some individuals,” Instagram’s submit on X learn. “There was no breach of our programs and your Instagram accounts are safe.”

Whereas Instagram stated this is not an information breach, its mum or dad firm has been in sizzling water for data breaches prior to now. If you have not already, it is at all times a good suggestion to activate two-factor authentication and alter your password. Even higher, you’ll be able to evaluation what gadgets are logged into your Instagram account in Meta’s Accounts Middle.

Replace, January 11, 2026, 11:10AM ET: This story and its headline have been up to date with Instagram’s assertion that was posted on X.