Instagram says there were ‘no breaches’ despite requests to reset password

Instagram claims that while some users received suspicious password reset requests, these were not breached.

This seems to contradict an article from Bluesky on Friday from antivirus software company Malwarebytes, which shared a screenshot of an email from Instagram notifying users of a password reset request. The post claimed: “Cybercriminals stole sensitive information from 17.5 million Instagram accounts, including usernames, physical addresses, phone numbers, email addresses, and more. »

This data, Malwarebytes added, “is available for sale on the dark web and can be used by cybercriminals.”

However, Instagram then job (on X, rather than Instagram or Threads) that it had “fixed an issue that allowed an external party to request password reset emails for certain people.”

The company didn’t provide any details about the external party or the specific issue, but its message concluded: “You can ignore these emails – sorry for any confusion.” »