11/01/2026
🚨 READ ME… ASAP! 🚨
There are credible reports of a historical Instagram data leak affecting around 17.5 million accounts.
The exposed data appears to include email addresses and phone numbers.
Passwords were not included.
For context, Instagram has roughly 2 billion monthly active users.
That means this represents under 1% of accounts (~0.9%)… statistically small.
What makes it relevant isn’t scale, but potential impact.
That dataset is sufficient to fuel highly targeted phishing attacks at scale, which is why there’s been a noticeable increase in scam emails and texts telling people to “reset their Instagram password”, usually with a link and a sense of urgency.
(I’ve received 4 such messages in the last 36 hours)
If you receive one of these messages, treat it as hostile by default.
Here’s the correct response:
• Do not click the link
• Open Instagram directly (app or instagram.com)
• Go to Settings → Security → Password
• Make changes only from inside Instagram
If you’re unsure whether an email actually came from Instagram:
Inside the app, go to
Settings → Security → Emails from Instagram
You’ll see a list of legitimate security emails sent in the last 14 days.
If the message isn’t there, it didn’t come from Instagram.
Because your Instagram account supports your business, the risk here isn’t abstract.
Loss of access can lead to impersonation, scam messages being sent to followers, and time-consuming recovery work.
Reporting source:
https://www.notebookcheck.net/Massive-data-leak-reportedly-exposes-information-of-17-5-million-Instagram-users.1201247.0.html
To check whether your email address appears in known breach data, Malwarebytes provides an official tool here:
https://www.malwarebytes.com/digital-footprint
(Email verification only. Never enter passwords.)
Two reminders worth keeping front of mind:
1. Instagram will never contact you via DM about security issues.
2. Urgency plus a link is almost always a tell.
Phishing attempts are rarely crafty… they rely on people being busy, distracted, or rushed.
Don’t panic. Keep alert. Know what to do
If your personal data was exposed in a data breach, you need to check your digital footprint. Use our free tool here.