Instagram says no data breached, despite 17.5 million users account data leaked online

TechnologyDigital
12 Jan 2026 • 11:36 AM MYT
PriceShop Malaysia
PriceShop Malaysia

PriceShop is Malaysia's top site for news & deals for consumer electronics

image is not available

If you received an email over the weekend about a password reset request from Instagram, you’re not alone. In fact, many people got one and the email did look pretty legit: the email is a real Instagram email account, and there’s even a blue checkmark that screams real. However, it was highly likely sent by hackers following a leak of 17.5 million user accounts.

— Instagram (@instagram) January 11, 2026

While there was additional clarification from Meta, the cybersecurity company Malwarebytes warned its users that the data of 17.5 million Instagram accounts had been scraped and posted online.

— Malwarebytes (@Malwarebytes) January 9, 2026

According to BleepingComputer, who found the data posted for free on several hacking forums, the user who posted it claimed it was collected via an Instagram API leak back in 2024. BleepingComputer added that they found details of 17,017,213 Instagram accounts, which includes usernames, emails, phone numbers and addresses. On the brightside, it does seem that this data doesn’t include passwords.

In any case, if you do receive another similar email in the future, there’s an easy way to check its legitimacy. Simply head to your Instagram app, go into settings and tap on Accounts Centre. There, scroll down to ‘Password and security’ and on the bottom you’ll see ‘Recent emails’. You can use then use this to check whether or not Instagram really did send you an email. Of course, it’s better to be safer by just turning on 2FA too.

Source

Read more of our articles below!

PriceShop’s Copilot+ PC Laptop Buying Guide
PriceShop’s Gaming Laptop Buying Guide
image is not available

The post Instagram says no data breached, despite 17.5 million users account data leaked online appeared first on Price Shop Malaysia.