If you recently received an unexpected password reset email from Instagram, don’t immediately assume your account has been hacked. The flurry of these emails appears to stem from a recently resolved bug within Meta’s systems, not a new data breach.
On Jan. 9, antivirus software provider Malwarebytes alerted users to a potential issue where threat actors may have obtained personal information from 17.5 million Instagram accounts. However, BleepingComputer notes that claims of Instagram data leaks have surfaced in the past due to API scraping, but no new breaches have been definitively confirmed. Meta stated the issue was caused by a bug allowing unauthorized password reset requests, which has since been patched, and maintains that no user data was compromised.
Data breaches are, unfortunately, a recurring threat, and Meta platforms have been targets in the past. It’s always wise to practice strong digital security habits and remain vigilant against potential phishing attempts.
Keeping Your Instagram Account Secure
If you receive an Instagram password reset email you didn’t request, simply ignore and delete it. Avoid clicking links in urgent or alarming security-related messages, as these could be phishing attempts designed to steal your login credentials or other sensitive information. If you need to change your password or update security settings, always access Instagram directly through the website or app.
What do you think so far?
Enable two-factor authentication (2FA) for Instagram if you haven’t already. Within the mobile app, navigate to Menu from your profile, then Accounts Center > Password and security > Two-factor authentication. You can choose to receive login codes via an authentication app (like Google Authenticator or Duo), SMS, or WhatsApp. Keep in mind that SMS-based 2FA is more vulnerable to phishing than authentication apps.
Finally, you can review logged-in devices under Accounts Center > Password and security > Where you’re logged in. If you spot any unfamiliar devices, select them and tap Log out.
