Instagram data breach affecting 17.5 million users: Was an API vulnerability to blame? And how can you protect your account?

Instagram data breach affecting 17.5 million users: Was an API vulnerability to blame? And how can you protect your account?
Instagram users are currently facing growing concerns about the leakage of sensitive personal data after cybersecurity firm Malwarebytes revealed that millions of accounts were being sold on the dark web, coinciding with a widespread and unusual surge in password reset messages. What exactly happened? According to a Malwarebytes report (published on their website and cited by sources such as 9to5Mac on January 13, 2026), data from 17.5 million Instagram accounts was leaked, including: Usernames Associated email addresses Phone numbers (if linked) Other information commonly used for phishing or account reuse. This data appeared for sale on dark web forums shortly after millions of users received password reset messages from Instagram, raising suspicions of a security breach. Instagram's stance: No system breach Instagram categorically denied any breach of its internal systems. In an official statement published on Tuesday, January 13, 2026, on the company's official X account, it state…

Post a Comment