Instagram again under scrutiny: leaked data of 17.5 million users, including phone numbers and email addresses
Instagram may have fallen victim to a major data breach affecting around 17.5 million users. This is reported by the cybersecurity company Malwarebytes, which discovered the data during a darknet check.
What is Known
According to Malwarebytes, the leak included user names, email addresses, phone numbers, and even physical addresses. This information is already being sold on the black market, increasing the risk of phishing attacks and account takeover attempts.
Screenshot of an email from Instagram. Malwarebytes
Experts believe that the incident is related to a vulnerability in the Instagram API that emerged back in 2024. It could have been the channel for accessing sensitive data.
Some users have started receiving bulk password reset requests from Instagram. This may indicate attempts to use the stolen information to hack accounts.
Meta, the company that owns Instagram, has not yet officially commented on the situation.
Security experts recommend changing your password, enabling two-factor authentication, and checking which devices have account access in the Meta Accounts Center.
Source: Malwarebytes