Did Instagram send you a password reset email without asking? here’s what really happened
Thousands of Instagram users around the world were left confused after receiving a password reset email that they never requested. The company has now clarified that the incident was caused by a technical issue and not a security breach.
If you recently opened your inbox to find a password reset email from Instagram that you never requested, you’re not alone. Over the past few days, thousands of users globally have reportedly reported receiving unexpected password reset notifications from Instagram, sparking widespread concern over a potential security breach. However, Instagram has issued a statement saying that the incident was caused by a technical issue that allowed an external party to trigger password reset requests. The platform assures its users that its internal systems have not been breached and user accounts are secure.
In an official statement shared on
What happened?
The clarification from the Meta-owned platform comes after several days of online speculation. Many users on social media expressed concern after receiving a password reset email without attempting to log in. Users also began sharing screenshots of the messages, with many unsure whether they were being hacked or targeted by a phishing scam.
The email was also received by a senior Forbes contributor, who said he received a legitimate-looking message that appeared to come from Instagram, claiming the company had received a request to reset his account password. As Forbes reports, the email included a large blue “Reset Password” button along with a verification message that read: “If you ignore this message, your password will not be changed. If you have not requested a password reset, let us know.”
Instagram data leak news
Initially, many users feared that the emails were the result of a hacking attempt or a data leak. Some users also raised concerns that the messages may have been part of a phishing campaign, as the emails were very similar to Instagram’s official password reset notifications.
And the timing of these emails made the anxiety even worse. The incident comes at a time when recent reports by cyber security researchers have revealed that large amounts of Instagram user information is being circulated on underground platforms. According to Malwarebytes, “Cyber criminals stole sensitive information from 17.5 million Instagram accounts, including usernames, physical addresses, phone numbers, email addresses, and more.” This information has reportedly been used by scammers to design convincing emails and messages that mimic official communications from the platform.
Due to this report about a possible data breach and the sudden wave of password reset emails, many users began to question whether the two issues were connected. While Instagram has denied any breach in this case, cybersecurity observers are advising users to avoid clicking links in any unexpected emails.
To stay safe from similar emails in the future, users are being encouraged to verify security notifications directly through the Instagram app rather than replying to messages in their inbox. Additionally, you can check the authenticity of any email by visiting the “Emails from Instagram” section under Settings > Security. Users are also advised to enable two-factor authentication and regularly update their passwords to improve account security.