Instagram fixed a bug that allowed mass password reset requests and clarified that no security breach occurred despite data being leaked online. The leaked information, which includes personal details of over 17 million accounts, is likely compiled from previous scraping incidents and does not contain passwords. #InstagramAPI #DataLeak
Keypoints
- Instagram resolved a bug that enabled external parties to request password resets for some users.
- The leaked dataset includes personal details like phone numbers, email addresses, and physical locations of over 17 million accounts.
- Meta confirmed there was no recent API breach or system compromise in 2022 or 2024.
- Most of the leaked data appears to be a compilation of previously scraped information over several years.
- Users are advised to enable two-factor authentication and remain cautious of phishing attempts using leaked data.