A Meta spokesperson confirmed that user accounts remain secure after Malwarebytes issued a warning about a data leak involving 17.5 million users. They stressed that if you receive an unsolicited notification email, you should simply delete it.
Following the cybersecurity company Malwarebytes' warning about the leak of more than 17.5 million Instagram accounts, which caused widespread concern among users, Meta's corporate communications team has issued an official statement clarifying the facts. They confirmed that no system breach occurred as feared.
“We have fixed an issue that allowed outsiders to request password reset emails for some Instagram users. We confirm that our systems were not compromised and that all Instagram accounts remain secure. Users can disregard these emails, and we apologize for any confusion caused,” said a Meta spokesperson.
Regarding the mysterious password reset emails many have recently received, Meta confirmed this was due to a technical vulnerability that allowed outsiders to trigger reset requests—not an internal data breach. They advised users who receive such unsolicited emails to delete or ignore them, as there is no current impact on account security.