New Delhi: Many of the Instagram users around the world have recently reported receiving multiple password reset emails, even though they did not make any of the requests. According to some reports, the sudden spike in these alerts caused concern about the possible data breach, prompting questions about whether user accounts had been compromised. Instagram has responded, saying that the user’s account remains secure and that there was no breach of its systems.
The issue first came into focus after an antivirus software company reported that data linked to around 17.5 million Instagram users was being circulated online. The information allegedly included usernames, email addresses, phone numbers and in some cases, physical addresses. The data was stated to be available for sale on dark web forums, raising fears that it could be misused. Many of the users began receiving repeated password reset emails from Instagram, which added to the confusion.
The security reported and warned that such leaked information could potentially be used for phishing attacks, social engineering or attempts to take over accounts. It also suggested that the data may be connected to an earlier issue involving an Instagram API exposure from 2024, though no explicit confirmation was provided. The company stated it has identified and fixed a problem that allowed an external party to trigger password reset emails for some users. It clarified that this did not involve unauthorised access to accounts or internal systems.
Instagram also posted that they have said that, “We fixed an issue that let an external party request password reset emails for some people. There was no breach of our systems, and your Instagram accounts are secure. You can ignore those emails. Sorry for any confusion.” While Instagram insists the incident was not a data breach, the situation has served as a reminder for users to review their account security. Enabling two-factor authentication, updating passwords regularly and checking which devices are logged into an account can help reduce risks. Users can review this information through the Accounts Centre linked to their Instagram profile.
