A significant data breach has exposed the personal information of 17.5 million Instagram users, as reported by the antivirus firm Malwarebytes. The incident, linked to potential issues with an Instagram API from 2024, has led to users receiving numerous password reset emails from the platform.
The compromised data includes Instagram usernames, physical addresses, phone numbers, and email addresses. Malwarebytes discovered the leak during a routine scan of the dark web, where the stolen information is reportedly available for sale, raising concerns about possible misuse by cybercriminals.
While Meta, Instagram's parent company, has not yet commented on this breach, it highlights ongoing security challenges faced by the company. Users are advised to enable two-factor authentication and review their logged-in devices in Meta's Accounts Center as precautionary measures against potential phishing attempts or account takeovers.