
Instagram has refuted any allegations of system breaches but has warned that suspicious password reset emails were triggered by an outside entity.
The scenario is atypical and perplexing.
This past weekend, Instagram released a statement denying any breach while acknowledging that third parties could initiate password reset emails. Although numerous users received unrequested password reset emails, these could potentially be genuine.
“We resolved a problem that allowed an external party to request password reset emails for certain individuals,” Instagram’s account on X stated. “There has been no breach of our systems, and your Instagram accounts remain secure. You may disregard those emails — we apologize for any misunderstanding.”
This Tweet is currently unavailable. It might be loading or has been removed.
Notably, Instagram users can review their account settings to view all official emails from Instagram in the last 14 days; however, the recent password reset emails do not show up for certain users. This feature appears to only reveal password reset emails that were requested by the user.
As a recommended cybersecurity practice, if you receive an unanticipated password reset email for any of your accounts — even if it seems credible — avoid clicking any links until you have confirmed the email’s authenticity.
According to a Mashable report over the weekend, users online pointed out a sudden influx of password reset emails from Instagram. The cybersecurity-focused TikTok account @ohhackno provided an explanation on the matter, which garnered over 4 million views.
There were worries that the reset emails were associated with allegations of a breach at Instagram, which the company has now dismissed.
For the time being, adhere to Instagram’s guidance and disregard the emails.