Instagram states that there has been "no security breach" even though users have received password reset notifications

Instagram Addresses Concerns Over Password Reset Emails

Instagram has clarified that, despite reports of users receiving unusual password reset notifications, there has been no security breach of its platform.

This statement appears to counter a post by the cybersecurity company Malwarebytes. In their post, Malwarebytes shared an image of an email from Instagram alerting users about password reset attempts. The company alleged that cybercriminals had accessed the personal data of 17.5 million Instagram users, including usernames, home addresses, phone numbers, email addresses, and additional sensitive information.

According to Malwarebytes, this stolen data is now being sold on the dark web, putting affected users at risk of further cybercrime.

In response, Instagram issued a statement on X (formerly Twitter), explaining that they had resolved a problem that allowed outsiders to trigger password reset emails for certain accounts. The company did not elaborate on the identity of the third party or the technical details of the vulnerability, but reassured users by stating, "You can ignore those emails — sorry for any confusion."