- A recent report circulating on social media and some cybersecurity newsletters states that **hackers stole sensitive information from about 17.5 million Instagram accounts.
- This data allegedly includes usernames, physical addresses, phone numbers, email addresses, and more, and is being offered for sale on the dark web.
Why Many Users Are Seeing Password Reset Emails
- Many Instagram users globally have reported receiving legitimate “reset your password” emails that they never requested.
- Some cybersecurity discussions online connect this surge in reset emails to the possible data compromise, suggesting attackers may be testing or abusing access.
Confirmed through multiple user reports: unusual password reset email activity.
Reported but not officially confirmed by Meta/Instagram yet: the exact scale of the leak and how the data was accessed.
Why This Matters
If the leak is real and includes the data claimed:
- Identity theft risks increase — contact info can be used in targeted scams.
- Account compromise attempts could rise if attackers use exposed emails/phones for phishing or brute-force tactics.
What You Should Do (Now)
Regardless of the breach’s exact details:
- Change your Instagram password via the app itself (not through email links).
- Enable Two-Factor Authentication (2FA) on your Instagram account.
- Avoid clicking unexpected reset links — manually navigate to the app to verify security notices.
- Check linked email/text accounts for unusual activity (spam, phishing).
Meta/Instagram Status
- As of now, Meta (Instagram’s parent company) has not issued a public statement confirming or denying the breach.
