{"id":128322,"date":"2026-01-13T00:20:04","date_gmt":"2026-01-12T18:50:04","guid":{"rendered":"https:\/\/www.techworm.net\/?p=128322"},"modified":"2026-01-13T00:20:04","modified_gmt":"2026-01-12T18:50:04","slug":"instagram-reassures-users-after-password-reset-email-scare","status":"publish","type":"post","link":"https:\/\/www.techworm.net\/2026\/01\/instagram-reassures-users-after-password-reset-email-scare.html","title":{"rendered":"Instagram Reassures Users After Password Reset Email Scare"},"content":{"rendered":"

Instagram has reassured users that their accounts remain secure after a sudden surge of unexplained password reset emails caused confusion and concern across the platform, sparking fears of a major cybersecurity breach.<\/p>\n

The emails, which appeared to come from legitimate Instagram addresses, stated that a request had been made by the user to reset their password \u2014 even though they had not made one. While the message claimed that ignoring the email would not change the password, many users were alarmed by the unexpected notifications.<\/p>\n

Malwarebytes Flags Possible Data Leak<\/strong><\/p>\n

The concern intensified after antivirus company Malwarebytes claimed that sensitive information linked to 17.5 million Instagram accounts was being sold on the dark web. According to the firm, the alleged data included usernames, email addresses, phone numbers, and even physical addresses.<\/p>\n

Malwarebytes stated the discovery was made during a routine dark web scan and suggested the data may be linked to an Instagram API exposure dating back to 2024. The company warned that such information could be misused by cybercriminals for phishing scams or account takeover attempts.<\/p>\n

Instagram Denies Breach, Fixes Technical Issue<\/strong><\/p>\n

In response, Instagram has strongly denied that its systems had been compromised and that user accounts were “secure.\u201d In a statement posted on X (formerly Twitter), the company said<\/a> the issue was caused by a technical flaw that allowed an external party to request password reset emails without accessing user accounts. Instagram added that users could safely ignore the emails and apologised for the confusion caused.<\/p>\n

However, the company did not provide further details about who the external party was or how the issue was exploited, but said the problem has now been resolved.<\/p>\n

What Users Should Do Now<\/strong><\/p>\n

Instagram has also reminded users that official emails are sent only from addresses ending in @mail.instagram.com and that receiving a password reset email does not automatically mean an account has been hacked.<\/p>\n

To stay safe, users are encouraged to:<\/p>\n