A massive breach exposed data of 17.5M Instagram users

Malwarebytes Labs and reporting sites warn of a major data breach exposing roughly 17.5 million Instagram user records containing usernames, emails, phone numbers and physical home addresses; portions of the database are reportedly being sold in batches on illicit forums, increasing risks of account takeover, stalking, swatting, extortion and identity theft. Researchers advise verifying password reset messages, resetting passwords only via the official app, enabling app-based 2FA, and reviewing third‑party app permissions.