Instagram has moved to calm its users by refuting claims that the data of over 17 million users was compromised. Reports emerged on January 10 that account information had been exposed online when many users received unexpected password reset emails.
Previously, cybersecurity firm Malwarebytes alleged that leaked data contained usernames, physical addresses, phone numbers, and email addresses of 17.5 million Instagram accounts. They cautioned that this information was being sold on the dark web for potential misuse by cybercriminals.
In contrast, Instagram stated there was no breach of their systems. They addressed the issue of password reset emails being requested by an external party, reassuring users that their accounts were secure and advising them to disregard any such emails.
However, this response did not assuage users’ concerns, leading to questions about how an external party could trigger password reset requests. Some users expressed skepticism, suggesting that the situation indicated a breach despite Instagram’s claims to the contrary.
Instagram provided recommendations to enhance account security, including enabling two-factor authentication using various methods such as phone numbers or authenticator apps. They emphasized the importance of keeping contact information updated to facilitate account recovery in case of unauthorized changes.
To maintain a secure account, Instagram advised users to activate two-factor authentication and ensure their associated email and phone numbers are current. These measures aim to enable account recovery even if unauthorized changes occur due to hacking attempts.
