Instagram Recovery Tool Bug Exposed 20,225 Accounts to Password Reset Abuse
ID: c87e36ae-9c03-5348-a5e8-e4b7892bc289
STIX ID: report--c87e36ae-9c03-5348-a5e8-e4b7892bc289
Feed Name: DataBreaches.Net
Threat Score
Meta disclosed that a flaw in Instagram’s 'High Touch Support' account recovery tool allowed attackers to send password reset links to email addresses not tied to the targeted accounts, affecting 20,225 people (including 30 residents of Maine). The incident occurred on April 17, 2026, was discovered on May 31, 2026, and was reported via a data breach notice.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.