Instagram Confirms no System Breach and Fixed External Party Password Reset Issue

Instagram confirmed that a now-fixed flaw allowed external parties to trigger legitimate password reset emails for some users, but said there was no breach of its systems; this occurred alongside the appearance of an advertised dataset of roughly 17.5 million accounts (usernames, emails, phone numbers, partial locations) on cybercrime forums. Although Instagram says accounts remain secure, the combination of large-scale scraping and the reset-email abuse raises the risk of targeted phishing and social-engineering attacks; users are advised to enable two-factor authentication, use unique passwords, and ignore unsolicited reset emails.