Instagram Password Reset Request Surge Sparks 17.5M Account Breach Controversy
Instagram denies a major security breach despite Malwarebytes claiming 17.5M accounts were compromised. Learn about the Instagram password reset request surge in 2026.
"The emails are real, but the breach isn't."Instagram is pushing back against claims of a massive data heist following a mysterious surge in password reset requests sent to users worldwide. While the company admits to a technical flaw, it's maintaining that user data remains secure.
Investigating the Instagram Password Reset Request Anomaly
On January 11, 2026, Instagram officially stated that it had not been breached, despite reports from the antivirus firm Malwarebytes suggesting otherwise. According to Malwarebytes, sensitive information from 17.5 million accounts—including usernames, physical addresses, and phone numbers—was reportedly listed for sale on the dark web. Instagram countered this by explaining it had simply fixed a bug that allowed an "external party" to trigger these automated emails for some users.
Conflicting Claims: Meta vs. Security Experts
The discrepancy between Meta's official stance and the findings of external security firms has left many users uneasy. Malwarebytes shared screenshots of official-looking emails that were supposedly part of a larger credential-harvesting operation. While Instagram hasn't provided details on who this "external party" was, they've reassured the public that the loophole is now closed. Critics, however, are calling for more transparency regarding how millions of reset requests could be triggered without a deeper security compromise.
Authors
Related Articles
A law firm marketing itself on AI-powered legal success submitted fake citations in a federal appeal. Now its lawyers face sanctions — and the broader AI legal industry faces a credibility crisis.
Five major publishers and author Scott Turow have filed a class action lawsuit against Meta, alleging the company used illegal pirate sites like LibGen to train its Llama AI models without permission.
New Mexico already won $375 million from Meta. Now it wants something harder to give: a court order forcing Facebook, Instagram, and WhatsApp to redesign themselves. A three-week trial starts Monday.
Meta acquired humanoid robotics startup ARI, adding to a Big Tech arms race in physical AI. The real prize isn't a robot product — it's a new way to train intelligence.
A law firm marketing itself on AI-powered legal success submitted fake citations in a federal appeal. Now its lawyers face sanctions — and the broader AI legal industry faces a credibility crisis.
Five major publishers and author Scott Turow have filed a class action lawsuit against Meta, alleging the company used illegal pirate sites like LibGen to train its Llama AI models without permission.
New Mexico already won $375 million from Meta. Now it wants something harder to give: a court order forcing Facebook, Instagram, and WhatsApp to redesign themselves. A three-week trial starts Monday.
Meta acquired humanoid robotics startup ARI, adding to a Big Tech arms race in physical AI. The real prize isn't a robot product — it's a new way to train intelligence.
Thoughts
Share your thoughts on this article
Sign in to join the conversation