Mon, 2 Nov 2026
Instagram · Security

Instagram says there was no breach after a wave of password reset emails

Some users received suspicious password reset emails. Instagram says the issue is fixed and the emails can be ignored.

Osamah Ismail · Founder & Editor-in-Chief
· 1 min read · Updated:
Instagram says there was no breach after a wave of password reset emails
Image: Meta

On January 11, many Instagram users received suspicious password reset emails they had not requested.

What Instagram said

Instagram wrote on X that it "fixed an issue that let an external party request password reset emails for some people", adding that there was "no breach".

"You can ignore those emails — sorry for any confusion."

Instagram gave no details about the external party or the issue.

Malwarebytes' claim

Earlier, security firm Malwarebytes claimed on Bluesky that data from 17.5 million Instagram accounts had been stolen. Instagram rejects that claim.

Protect yourself

  • Don't click links in suspicious emails
  • Turn on two-factor authentication for your account
  • If you use the same password elsewhere, change it
Sources: Instagram (X), Malwarebytes, TechCrunch
Osamah Ismail

Founder and editor-in-chief of Kurd Developers. Phone and tech news on YouTube, Instagram and TikTok.