[Update] Instagram users worldwide report unexpected password reset emails amid alleged data leakUpdat

Update as of 11 January 2026, 12:50 PM: Instagram has issued a statement on X explaining why some users were receiving unexpected password reset emails.

We fixed an issue that let an external party request password reset emails for some people. There was no breach of our systems and your Instagram accounts are secure. You can ignore those emails — sorry for any confusion.

We fixed an issue that let an external party request password reset emails for some people. There was no breach of our systems and your Instagram accounts are secure.

You can ignore those emails — sorry for any confusion.

— Instagram (@instagram) January 11, 2026

Old story continues below.

Instagram users across the globe are reporting that they are receiving password reset emails despite not requesting any reset. While some initially believed this to be a temporary glitch, a report by Malwarebytes claims that data linked to 17.5 million Instagram accounts has been leaked on the dark web.

According to the report, the exposed data allegedly includes usernames, physical addresses, phone numbers, email addresses, and other personal information.

Cybercriminals stole the sensitive information of 17.5 million Instagram accounts, including usernames, physical addresses, phone numbers, email addresses, and more. pic.twitter.com/LXvjjQ5VXL

— Malwarebytes (@Malwarebytes) January 9, 2026

With multiple users confirming that password reset emails are landing in their inboxes, users are strongly advised not to click on any links in such emails if they did not initiate the request themselves, as doing so could potentially expose login credentials to attackers.

If you believe you’ve received a suspicious password reset request, you can improve your account security by enabling Two-Factor Authentication (2FA) or changing your password immediately.

How to enable Two-Factor Authentication (2FA) on Instagram:

Go to Profile > Menu (three lines) > Accounts Center > Password and security > Two-factor authentication, select your account, choose a security method (Authenticator app or SMS/WhatsApp), and follow the on-screen steps.

How to change your Instagram password manually:

Go to Profile > Menu (☰) > Settings & Privacy > Accounts Center > Password and Security > Change Password, then enter your current password and set a new one.

As of now, Meta-owned Instagram has not issued any official statement regarding this alleged data breach.