17 million Instagram users receive password reset emails as account details leaked

Millions of Instagram users are finding themselves on the receiving end of unforeseen password reset communications following reports that their account credentials may have been compromised.

Those utilising the social media service have been advised to exercise extreme caution prior to engaging with or responding to such correspondence, amid concerns that cyber criminals could be taking advantage of the platform's vast user community.

However, specialists maintain that whilst users ought to steer clear of selecting the Reset Password option within dubious messages, would-be attackers would require supplementary details to gain unauthorised entry to accounts.

Davey Winder, a Forbes contributor and cybersecurity expert, confirmed he was amongst those who encountered a 'legitimate-looking email' this past Friday, 'seemingly from Instagram', asserting the company had been notified of a request to alter his account credentials.

The correspondence featured a prominent blue Reset Password button, accompanied by the text, "If you ignore this message, your password will not be changed. If you didn't request a password reset, let us know," as reported by the Independent, reports the Mirror .

Private information from in excess of 17 million Instagram entries has purportedly surfaced on the internet, courtesy of a threat actor operating under the moniker "Solonnik."

As outlined by technology publication CyberInsider, the material was initially pilfered through an API vulnerability in 2024, whereby a hacker circumvented conventional security measures to harvest the data. A colossal dataset was made freely available on the well-known cybercrime platform, BreachForums, this past Wednesday.

Specialists have highlighted that the staggering quantity of 17 million records suggests a substantial security lapse. Despite the data's exposure, Instagram's parent company, Meta, has yet to verify the breach or the authenticity of the allegations.