Instagram denied a data breach after numerous users reported receiving unsolicited password reset emails. The company acknowledged resolving an issue that allowed "an external party" to trigger legitimate password reset requests, but maintained that its systems were not compromised, according to a statement released by the platform.

The situation has sparked conflicting reports and security concerns. While Instagram assured users their accounts were secure, cybersecurity firm Malwarebytes claimed that data from 17.5 million Instagram accounts was being sold on the dark web. It is unclear whether the data originated from a recent breach or older, publicly available sources.

Instagram advised users to disregard suspicious emails, but did not disclose further details about the vulnerability. This lack of transparency has fueled unease among users, according to multiple news sources.

The company said it had resolved the problem that allowed the unauthorized password reset requests. However, some experts have questioned Instagram's assessment, citing Malwarebytes' claims of compromised data appearing on the dark web.