Meta has said there was no breach of its systems after Instagram users reported receiving a large number of password-reset emails over the past few days.
As per the details, a Meta spokesperson said the company had fixed an issue that allowed an external party to trigger password reset emails for some Instagram users.
“We want to reassure everyone there was no breach of our systems and people's Instagram accounts remain secure,” the spokesperson said, adding that users could disregard the emails.
They also apologised for the confusion.
It merits a mention that the statement comes amid concerns that personal data linked to millions of Instagram accounts had been leaked.
Cybersecurity experts had initially claimed that information related to around 17.5 million accounts had been exposed and released on the dark web. According to those claims, the data included usernames, full names, email addresses, phone numbers, partial physical addresses and other contact details.
Passwords were not believed to be part of the leaked dataset, though experts warned that personal information could still be misused for identity or financial fraud.
The issue was first highlighted on X by security firm Malwarebytes, which said the data had likely been shared with cyber criminals.
The firm warned users to remain cautious following the reports of the leak.
Following the publication of the data, thousands of Instagram users reported receiving multiple password-reset request emails. Reports said users received messages claiming a password reset had been requested for their account.
The emails included a reset password button along with a message stating that the password would not be changed if the email was ignored and advised users to report the request if they had not initiated it.
