Instagram says there was “no breach” despite password reset requests

Instagram says that although some users have received password reset requests that appear suspicious, they have not been compromised.

This seems contradictory Post Friday Bluesky From antivirus software company Malwarebytes, which shared a screenshot of an email from Instagram informing users of their password reset request. “Cybercriminals stole sensitive information of 17.5 million Instagram accounts, including usernames, physical addresses, phone numbers, email addresses, and more,” the post claimed.

This data is “available for sale on the dark web and can be abused by cybercriminals,” Malwarebytes added.

However, Instagram later to publish (on X, rather than Instagram or Threads) that it “fixed an issue that allowed a third party to request password reset emails for some people.”

The company did not provide any details about the third party or the specific issue, but its post concluded that “you can ignore these emails – sorry for any confusion.”