Instagram denied a data breach after numerous users reported receiving unsolicited password reset emails. The company stated it had resolved an issue that allowed an "external party" to trigger legitimate password reset requests, but maintained that its systems were not compromised.

The incident sparked concern among users and security experts, particularly after cyber security firm Malwarebytes claimed that data from 17.5 million Instagram accounts was being sold on the dark web. According to Malwarebytes, the password reset emails were a result of a hack.

Instagram advised users to disregard suspicious emails, but did not disclose specific details about the vulnerability that allowed the unauthorized password reset requests. This lack of transparency has raised concerns within the industry about user data security.

While Instagram assured users that their accounts were secure, the incident prompted questions about the platform's security measures. The company stated it had addressed the issue, but the absence of detailed information regarding the vulnerability left some experts unconvinced.