Instagram says accounts are secure after password reset confusion
An Instagram logo is shown on an iPhone screen, Friday, Feb. 5, 2021, in Derry, N.H. (AP Photo/Charles Krupa)
A wave of confusion swept through Instagram’s global user base after many received unexpected emails urging them to reset their passwords. These messages arrived without any clear warning or explanation.
Reports began circulating online claiming that personal data linked to roughly 17.5 million Instagram accounts had been leaked. The alleged information goes beyond usernames, reportedly including full names, email addresses, phone numbers, user IDs and partial address details.
If verified, such data could be used by cybercriminals to carry out phishing schemes, impersonation attempts or identity theft.
The timing of the reported leak raised eyebrows as it coincided with a spike in password reset emails received by users across different regions.
Many Instagram users took to social media platforms to compare experiences, with some expressing concern that the emails were signs of a deeper security issue.
For others, the lack of immediate clarity made it difficult to determine whether Meta, Instagram’s parent company, was dealing with a serious breach or a technical flaw.
We fixed an issue that let an external party request password reset emails for some people. There was no breach of our systems and your Instagram accounts are secure. You can ignore those emails — sorry for any confusion.
— Instagram (@instagram) January 11, 2026
Instagram, however, attempted to calm fears surrounding the password reset emails. In a statement shared with users, the company explained, “We fixed an issue that let an external party request password reset emails for some people. There was no breach of our systems and your Instagram accounts are secure. You can ignore those emails — sorry for any confusion.”
The platform emphasized that its systems were not compromised and framed the incident as an abuse of a password reset function rather than a direct hack.
