General · 12 January 2026
Instagram resets passwords after 17.5M accounts data leak
Instagram users worldwide received unexpected password reset emails after cybersecurity firm Malwarebytes reported that data from 17.5 million accounts appeared on dark web forums. The leaked data allegedly includes usernames, email addresses, phone numbers and physical addresses from a 2024 API breach. Meta denied any new security breach, stating it fixed an issue allowing external parties to trigger password reset emails. The company insisted no internal systems were compromised and accounts remain secure. Security experts warn the leaked data could enable phishing attacks and identity fraud, advising users to change passwords directly through the app.
Reported by Engadget · How we write briefs