Instagram data leak reported to affect around 17.5 million accounts

Security firm Malwarebytes reported that about 17.5 million Instagram account records were published online and that Meta has not yet confirmed the breach.

A large set of Instagram account details was reported online, prompting warnings from security researchers. Malwarebytes posted about the appearance of the dataset on X and said the information has likely been shared with cybercriminals. The dataset is reported to come from an Instagram API leak in 2024 and was posted on BreachForums; Meta has not confirmed the report. Key points: - About 17.5 million account records were reported in the dataset, including usernames, full names, email addresses, phone numbers and partial physical addresses. - Malwarebytes announced the dataset on X and warned it had likely been shared with cybercriminals. - The data is reported to have been taken from a 2024 Instagram API leak and later posted on BreachForums by a user named "Solonnik." - Meta, Instagram's parent company, has not confirmed the breach, and thousands of people reported receiving multiple password reset emails in recent days. Summary: The report indicates personal contact details for millions of Instagram accounts were published and may be circulating among criminal actors. Undetermined at this time whether Meta will confirm the breach or what formal investigative or legal steps will follow.