Instagram is one of the most popular social networks. Unlike Facebook, X or Bluesky, it is based on images and short videos and is therefore more user-friendly for many users.storem. But something very disturbing happened this past weekend. Many people started receiving emails asking them to reset and change their Instagram passwords. And Malwarebytes subsequently reported that Instagram had been compromised by hackers.
If you also have an account on Instagram, maybe you are email with a request to change your password received as well. After a quick check, it was found that the emails actually came from the official Instagram email account and it's not a scam trying to trick users into giving up their login credentials. It is therefore perfectly safe to make the change. But the question remains as to why the social network under the Meta company suddenly requires this unusual action.
Gallery
An explanation was offered by Malwarebytes, which posted on its Bluesky account that Instagram was struggling with hacker attack. It was allegedly attacked 17,5 million accounts and data was stolen from them. It is now said that it is being sold on the dark web. That is why Instagram is said to have responded by asking its users to change their current passwords.
We fixed an issue that let an external party request password reset emails for some people. There was no breach of our systems and your Instagram accounts are secure.
You can ignore those emails — sorry for any confusion.
- Instagram @instagram January 11, 2026
But Meta quickly denied this and claims that there was no leak. But it seems that the emails were not sent directly by Meta. Someone managed to send them to users simply by tried to hack into their accounts. However, this apparently failed. Instagram now assures that "fixed an issue that allowed an external party to request password reset emails for some users".
And what should confused users do? They don't have to do anything. Meta even recommends that they email completely ignore.PreventYou can still change your password, however.
