Millions of Instagram users are currently receiving unexpected emails prompting password resets due to potential exposure of their account information. Instagram has moved to calm its user base by refuting claims that data from over 17 million users had been compromised and affirming that there was no security breach.
Users of the social platform are being advised to exercise caution when interacting with such emails and avoid clicking on suspicious links, particularly those related to password resets. Security experts emphasize that while it is wise to be vigilant, malicious actors would still require additional information to successfully breach accounts.
Notable cybersecurity writer Davey Winder disclosed receiving a seemingly genuine email from Instagram requesting a password reset, which contained a prominent “Reset Password” button and a warning that neglecting the message would keep the password unchanged. The email’s legitimacy was confirmed by The Independent.
Reports indicate that sensitive information from more than 17 million Instagram accounts was leaked online by an entity known as “Solonnik.” This data breach allegedly stemmed from an API leak in 2024, where the hacker managed to circumvent standard security measures to gather the data. The compromised dataset was reportedly made available for free on the cybercrime platform BreachForums.
Instagram addressed the issue by stating, “We fixed an issue that allowed external parties to request password reset emails for some users. There was no breach of our systems, and your accounts remain secure. Disregard those emails – apologies for any confusion.”
For a quicker access to preferred news, make Daily Mirror your selected source on Google News.