11/01/2026
đ¨ READ ME⌠ASAP! đ¨
There are credible reports of a historical Instagram data leak affecting around 17.5 million accounts.
The exposed data appears to include email addresses and phone numbers.
Passwords were not included.
For context, Instagram has roughly 2 billion monthly active users.
That means this represents under 1% of accounts (~0.9%)⌠statistically small.
What makes it relevant isnât scale, but potential impact.
That dataset is sufficient to fuel highly targeted phishing attacks at scale, which is why thereâs been a noticeable increase in scam emails and texts telling people to âreset their Instagram passwordâ, usually with a link and a sense of urgency.
(Iâve received 4 such messages in the last 36 hours)
If you receive one of these messages, treat it as hostile by default.
Hereâs the correct response:
⢠Do not click the link
⢠Open Instagram directly (app or instagram.com)
⢠Go to Settings â Security â Password
⢠Make changes only from inside Instagram
If youâre unsure whether an email actually came from Instagram:
Inside the app, go to
Settings â Security â Emails from Instagram
Youâll see a list of legitimate security emails sent in the last 14 days.
If the message isnât there, it didnât come from Instagram.
Because your Instagram account supports your business, the risk here isnât abstract.
Loss of access can lead to impersonation, scam messages being sent to followers, and time-consuming recovery work.
Reporting source:
https://www.notebookcheck.net/Massive-data-leak-reportedly-exposes-information-of-17-5-million-Instagram-users.1201247.0.html
To check whether your email address appears in known breach data, Malwarebytes provides an official tool here:
https://www.malwarebytes.com/digital-footprint
(Email verification only. Never enter passwords.)
Two reminders worth keeping front of mind:
1. Instagram will never contact you via DM about security issues.
2. Urgency plus a link is almost always a tell.
Phishing attempts are rarely crafty⌠they rely on people being busy, distracted, or rushed.
Donât panic. Keep alert. Know what to do
If your personal data was exposed in a data breach, you need to check your digital footprint. Use our free tool here.