In one of its latest posts, Instagram told users to ignore those suspicious password reset requests they’ve recently received via email, and apologized for the confusion.
Instagram Data Breach?
For a refresher, Malwarebytes discovered a data breach during its routine dark web scam which involves 17.5 million Instagram users, already being sold in the Dark Web. It also revealed that the leak included a range of sensitive information ranging from Instagram usernames and phone numbers to physical and email addresses.
We fixed an issue that let an external party request password reset emails for some people. There was no breach of our systems and your Instagram accounts are secure.
— Instagram (@instagram) January 11, 2026
You can ignore those emails — sorry for any confusion.
Instagram also claimed that there was no breach in its systems, and that its users’ accounts are secure. The company mentioned that it “fixed an issue that let an external party request password reset emails for some people.” Whatever that means.
The posts on Threads and X have received mixed responses, with some doubting that there was no breach, and other thanking Instagram for the clarification.
Regardless, it’s always good to take care of your account by regularly changing your password and enabling things like two-factor authentication for that added peace of mind.
Emman has been writing technical and feature articles since 2010. Prior to this, he became one of the instructors at Asia Pacific College in 2008, and eventually landed a job as Business Analyst and Technical Writer at Integrated Open Source Solutions for almost 3 years.







