Instagram users alarmed by password reset emails, company denies hack

Over the weekend, a wave of unexpected password reset emails landed in the inboxes of Instagram users around the world. For many users, it felt like the start of a familiar digital nightmare. An alert that someone had tried to log in, followed by instructions to secure your account, is rarely something you can shrug off.

As the emails piled up, so did the anxiety. Was this a data breach? Had millions of accounts been compromised? And why was it happening all at once? Instagram responded, and here’s what they had to say.

What actually triggered the reset emails

According to Instagram, there was no hack or data breach. The company has since confirmed that the emails were the result of an abuse of its password reset system, not a successful attack on user accounts.

In a statement posted on X, Instagram said it fixed an issue that allowed an external party to request password reset emails for some users. Crucially, this did not mean anyone gained access to accounts or personal data. It simply meant that someone found a way to trigger the automated reset emails at scale.

ALSO READ: How to watch Instagram Reels on your TV

The confusion intensified after cybersecurity firm Malwarebytes suggested on social media that data from millions of Instagram accounts had been stolen and put up for sale. That claim has now been directly contradicted by Instagram, which insists no such breach took place.

Even established publications were caught in the crossfire. Android Authority confirmed that its official Instagram account received multiple reset emails, despite no suspicious login activity taking place.

Should you be worried about your account

The short answer is no, at least not in the way many initially feared. Instagram says users can safely ignore the emails and that their accounts were never compromised. The company has apologised for the confusion and says the underlying issue has been resolved.

That said, the incident is a reminder of how unsettling security alerts can be, especially when they arrive without context. If the emails made you uneasy, resetting your password won’t hurt. It is a simple precaution, and it doesn’t cost you anything to do it. Did you get a password reset email from Instagram this weekend? Drop a comment to let us know.