Instagram users have been urged to stay vigilant after reports of unexpected password reset emails, raising fears of a possible data breach.
Many users have reported receiving multiple emails prompting them to reset their passwords, even though they hadn’t requested a change.
While the reset links appear to come from a legitimate Instagram email, cybersecurity firm Malwarebytes suggests they may follow a reported cyber breach.
It’s claimed that a data theft in late 2024 allowed hackers to scrape profile data from around 17.5 million accounts, including usernames, addresses, phone numbers, and emails.
Users are advised to ignore any unprompted password reset emails and avoid clicking the links. However, Instagram says these emails aren’t always a cause for alarm.
Instagram released a statement explaining that these emails don’t necessarily mean you’ve been hacked. Their top tip? Stay vigilant
The Meta-owned platform stressed that official emails only come from the @mail.instagram.com address.
“If you do have additional security concerns, you may want to reset your password and enable two-factor authentication,” the platform said.
Meta announced early Monday that they’ve resolved the glitch allowing external parties to request password reset emails on behalf of users.
