Instagram faced user concerns over unsolicited password reset emails, but the company denies any data breach occurred. The social media platform stated it resolved an issue that allowed an "external party" to trigger legitimate password reset requests.

The issue arose when numerous Instagram users reported receiving emails prompting them to reset their passwords, according to the BBC. Instagram advised users to disregard suspicious emails.

Cybersecurity firm Malwarebytes claimed that the password reset emails were the result of a hack, alleging that the sensitive information of 17.5 million Instagram accounts was stolen. Malwarebytes further claimed this data was being sold on the dark web.

Despite these claims, Instagram maintains that there was no breach of its systems and assured users that their accounts were secure. However, the company has not disclosed specific details about the vulnerability that allowed the unauthorized password reset requests. This lack of transparency has raised concerns within the industry regarding user data security and potential future exploits, according to TechCrunch.

The specifics of how the "external party" was able to initiate the password reset requests remain unclear. Instagram stated they addressed the issue, but the absence of detailed information has left some experts questioning the platform's assessment of the situation, according to the BBC.

The situation remains fluid as users are advised to be cautious of suspicious emails.