Instagram has moved to reassure its users, refuting claims that the data of over 17 million users had been compromised. Reports emerged on January 10, suggesting that account information was leaked online, prompting a wave of unexpected password reset emails.
Previously, cybersecurity firm Malwarebytes alleged that leaked data contained usernames, physical addresses, phone numbers, and email addresses from 17.5 million Instagram accounts. The firm warned that this data was being sold on the dark web, posing a risk of exploitation by cybercriminals.
Instagram, however, refuted these claims. In a statement on Sunday morning, the social media platform explained that they had resolved an issue that allowed an external party to request password reset emails for some users. Instagram assured its users that there was no breach of their systems, and their accounts remained secure, urging users to disregard the reset emails and apologizing for any confusion.
Despite Instagram’s response, some users remained skeptical. Questions arose about how an external party could trigger password resets, with concerns lingering about the security of their accounts. Some users criticized Instagram for the perceived security lapse, while others expressed frustration over the inconvenience of securing their accounts independently.
In light of the situation, Instagram outlined measures to enhance account security. The platform recommended enabling two-factor authentication and highlighted upcoming features to safeguard accounts using WhatsApp numbers in selected regions. Users were also advised to update their contact information to facilitate account recovery in case of unauthorized changes.
Overall, Instagram emphasized the importance of taking proactive steps to protect user accounts and encouraged users to stay vigilant against potential security threats.