Instagram Denies Data Breach Claims Affecting 17.5 Million Users

Instagram has responded to serious allegations of a security breach, asserting that no user data has been compromised. On January 10, 2024, reports surfaced claiming that sensitive information from over 17 million accounts had been leaked online. This concern followed a surge of unsolicited password reset emails received by users, prompting widespread alarm.

The cybersecurity firm Malwarebytes was the source of the initial claim, stating, “Cybercriminals stole the sensitive information of 17.5 million Instagram accounts, including usernames, physical addresses, phone numbers, email addresses, and more. This data is available for sale on the dark web and can be abused by cybercriminals.”

In a statement posted on social media platform X on January 14, Instagram, which is owned by Meta, categorically rejected these assertions. The platform explained, “We fixed an issue that let an external party request password reset emails for some people. There was no breach of our systems, and your Instagram accounts are secure. You can ignore those emails. Sorry for any confusion.”

Despite this clarification, many users remain skeptical. One user expressed doubt, questioning how an external party could initiate password reset requests without a breach. Another user voiced frustration, stating, “If an external party can trigger a password reset on my account, that IS a breach. I had to spend time investigating the issue for myself, changing my password, setting up two-factor authentication, trying to log out on all devices, which you don’t make easy. What a waste of time. Get your act together!”

Concerns were echoed by others, with one user declaring their decision to delete their account, asserting that allowing a third-party email reset is indicative of a security breach.

In response to these concerns, Instagram has reiterated its commitment to user security, advising users to enable two-factor authentication. This feature adds an additional layer of protection, requiring a second form of identification to access accounts. The platform also mentioned that users in certain countries will soon be able to use their WhatsApp number for account verification.

Instagram encourages users to ensure that their contact information is current, stating, “Make sure that the email and phone numbers associated with your device are up to date. That way, if something happens to your account, we can reach you. These steps let you recover your account even if your info has been changed by a hacker.”

As the situation unfolds, Instagram faces the challenge of rebuilding user trust while ensuring robust security measures are in place to protect its vast user base.