Instagram denied a data breach after numerous users reported receiving unsolicited password reset emails. The social media platform stated it had resolved an issue that allowed an "external party" to trigger legitimate password reset requests.
According to Instagram, there was no breach of its systems, and user accounts remained secure. The company advised users to disregard suspicious emails. However, the company has not disclosed details of the vulnerability, leading to ongoing security concerns.
Cybersecurity firm Malwarebytes disputed Instagram's claim, alleging the password reset emails stemmed from a hack. Malwarebytes claimed that the sensitive information of 17.5 million Instagram accounts was stolen. They further alleged that this data was being sold on the dark web.
The BBC reported that Instagram said it had resolved a problem which allowed "an external party" to get the social media platform to send out legitimate password reset requests to users.
The incident has sparked concern among users, with many questioning the platform's security measures. The lack of transparency from Instagram regarding the nature of the vulnerability has further fueled these concerns.
Discussion
Join the conversation
Be the first to comment