Meta Responds to Massive Instagram Data Breach as Users Get Password Reset Emails

Meta has clarified that Instagram accounts remain secure after users reported receiving a large number of password-reset emails in recent days. A company spokesperson explained that an issue allowing an external party to trigger these emails has been fixed, reassuring users that there was no breach of Meta’s systems and that the emails can be safely ignored.

The statement comes amid concerns that personal information linked to millions of Instagram accounts may have been exposed. Cybersecurity experts initially reported that data from around 17.5 million accounts—including usernames, full names, email addresses, phone numbers, and partial physical addresses—had been leaked and shared on the dark web. Passwords were reportedly not part of the dataset, but experts warned that the information could still be misused for identity theft or financial fraud.

Security firm Malwarebytes first highlighted the issue on X, noting the potential for the data to reach cybercriminals. Following the reports, many Instagram users received multiple password-reset emails, which included a reset link and instructions that the password would remain unchanged if the email was ignored, with advice to report the request if they had not initiated it.