17.5 million Instagram accounts exposed in major data breach
13 oC
13 oC
Güneşli
13 oC
Güneşli
A significant data incident involving Instagram has raised alarm among millions of users worldwide, with reports that sensitive information from approximately 17.5 million accounts is circulating on the dark web, cybersecurity experts say.
Security firm Malwarebytes first flagged the issue after detecting the dataset during routine dark-web monitoring. According to the company, the compromised information includes usernames, full names, email addresses, phone numbers and partial physical addresses, all of which could be misused by cybercriminals for phishing, identity theft and other scams.
The dataset appears to originate from what researchers describe as an API scraping incident in late 2024, in which a threat actor using the alias “Solonik” published the data on hacking forums. The leak has since been shared widely and is now available for download or purchase on underground platforms.
In the wake of the exposure, millions of Instagram users have reported receiving unexpected password reset emails — some legitimate notifications from Instagram’s own servers, others suspected to be part of criminal attempts to exploit the leaked data. Experts warn that automated password reset emails may be used to confuse users into clicking malicious links or revealing authentication details.
Meta, Instagram’s parent company, has not officially confirmed that a breach occurred, but some tech industry reports indicate the company is aware of “unusual activity” and is investigating. As of January 11, Meta has not issued a comprehensive public statement on the underlying leak or its scope.
Cybersecurity specialists are urging all Instagram users to take immediate precautions, including enabling two-factor authentication (2FA) preferably through an authenticator app rather than SMS, ignoring unsolicited password reset emails and avoiding clicking on any suspicious links, and regularly reviewing logged-in devices and security settings within the Instagram app to ensure account safety.
Even if passwords were not directly exposed, the combination of contact details and identifiers in the leaked dataset greatly increases the risk of phishing campaigns, social engineering attacks and account takeovers.
The situation remains under active analysis by security researchers and will likely prompt further guidance from Meta in the coming days. (ILKHA)
LEGAL WARNING: All rights of the published news, photos and videos are reserved by İlke Haber Ajansı Basın Yayın San. Trade A.Ş. Under no circumstances can all or part of the news, photos and videos be used without a written contract or subscription.
Brazil’s National Telecommunications Agency (Anatel) has approved regulations requiring mobile phone users to undergo facial recognition with a live verification check to activate or maintain their cellular lines, as authorities seek to combat digital fraud and identity theft.
Cryptocurrency exchange Binance said Thursday that digital assets worth $6.3 billion have been affected by a major security incident that could rank among the largest cryptocurrency hacks in history.
South Korea’s media regulator has fined Google and Apple a combined 63.7 billion won ($48.35 million) for restricting app developers to their respective in-app payment systems, ordering both technology giants to take corrective measures.
Microsoft has introduced a new voluntary exit program covering approximately 60,000 employees across the United States, Canada, the United Kingdom and India, expanding its workforce-reduction options following thousands of job cuts and a voluntary retirement initiative earlier this year.
