Instagram Password Reset Email Glitch Hits Millions Amid 17.5M Data Leak Claims
Meta claims the recent Instagram password reset email wave was a fixed glitch, but new reports suggest 17.5 million accounts may have had their data leaked.
17.5 million users might be at risk. What Meta described as a harmless technical glitch regarding Instagram password reset email notifications is now facing intense scrutiny as conflicting security reports emerge.
Meta Denies Breach Despite External Reports
According to The Verge, Instagram recently addressed an issue where users were flooded with unauthorized password reset requests. Meta stated on X that an "external party" triggered the emails but insisted that there was no breach of its internal systems. However, security firm Malwarebytes paints a far more concerning picture.
Information on 17.5 million Instagram accounts, including usernames, physical addresses, phone numbers, and emails, has reportedly been compromised.
The Discrepancy in Security Statements
While Meta advises users to simply ignore the emails, the scale of the data reportedly found by Malwarebytes suggests a massive coordinated effort. Industry analysts suggest this could be a 'credential stuffing' attack where hackers use previously leaked data to gain access to active accounts, triggering the platform's automated security responses.
This content is AI-generated based on source articles. While we strive for accuracy, errors may occur. We recommend verifying with the original source.
Related Articles
Threads has officially overtaken X in daily mobile active users as of January 2026, hitting 141.5 million. While X leads on the web, Meta's mobile growth is reshaping social media.
Signal co-founder Moxie Marlinspike launches Confer AI privacy assistant, featuring E2E encryption and TEE tech to ensure conversations remain private.
Reports confirm a US cyberattack on Venezuela power grid during Operation Absolute Resolve. Explore the implications of ICE's AI tool failures and Palantir's ELITE app in this PRISM intelligence briefing.
A sophisticated Iran WhatsApp phishing campaign has exposed 850 records of activists and officials. Learn how hackers used QR codes and DuckDNS to bypass security.