Did You Get an Instagram Password Reset Electronic mail Just lately? This May Be the Very Disagreeable Purpose

The cybersecurity firm Malwarebytes simply seen one thing disagreeable occurring over on the darkish internet:

Cybercriminals stole the delicate info of 17.5 million Instagram accounts, together with usernames, bodily addresses, cellphone numbers, electronic mail addresses, and extra. This knowledge is offered on the market on the darkish internet and could be abused by cybercriminals.

[image or embed]

— Malwarebytes (@malwarebytes.com) January 9, 2026 at 8:34 AM

Did you obtain any surprising password reset emails from Instagram currently? If the feedback on a Reddit post about this breach from a few hours ago are any indication, you’re not alone.

Evidently the bodily addresses, cellphone numbers, electronic mail addresses and different info hooked up to the accounts of 17.5 million Instagram customers is offered on the market within the sketchier components of the web.

Apparently Malwarebytes performs sweeps of the darkish web for gadgets like this, and surmised that this cache of non-public particulars is tied a 2024 API breach that doubtless allowed an attacker to pry the knowledge out of Instagram.

Some steps you possibly can take to make sure that your info is protected embrace:

Resetting your password proper now
Turning on two-factor authentication if you happen to haven’t already
Completely deleting all social media accounts from all platforms

To date Instagram doesn’t seem to have printed a press release about this concern. Gizmodo reached out to Meta for remark, and can replace if we hear again.

Trending Merchandise