Story perspectives

Instagram Users Alerted: Password Resets Linked to Data Leak

1/14/2026

Summary

Story summary

Instagram, the social media platform, said an external party triggered password reset emails.
There was no breach of Instagram's systems.
The cybersecurity firm Malwarebytes linked the incident to a 2024 data leak affecting 17.5 million accounts, including usernames and phone numbers.
Experts warn that the exposed data could enable phishing and SIM-swapping attacks.
Instagram advises users to ignore the emails, change passwords, and enable two-factor authentication.

1 of 1

Story summary

Instagram, the social media platform, said an external party triggered password reset emails.
There was no breach of Instagram's systems.
The cybersecurity firm Malwarebytes linked the incident to a 2024 data leak affecting 17.5 million accounts, including usernames and phone numbers.
Experts warn that the exposed data could enable phishing and SIM-swapping attacks.
Instagram advises users to ignore the emails, change passwords, and enable two-factor authentication.