Instagram Confirms No System Breach After External Password Reset Problem

Instagram patched a flaw that let an external party request password reset emails on behalf of users (no account takeover reported); the event coincides with an alleged 17.5M-account scrape containing contact details, raising concerns that leaked data could have been used to target users via the reset-email weakness and social-engineering campaigns. Users are advised to enable 2FA, use unique passwords, and monitor for phishing and suspicious login activity.