Millions of Instagram users have had their personal details leaked, as those affected have reported a deluge of password reset emails, cyber experts have warned. The breach was revealed on X by security firm Malwarebytes on Saturday, which warned that the leaked data has likely been shared with cyber criminals. Typically people have been receiving an email that appears to have been sent by Instagram claiming that a password reset has been requested on the account. The email features a large blue Reset Password button alongside the message, 'If you ignore this message, your password will not be changed. If you didn’t request a password reset, let us know.'

Source: Daily Mail January 10, 2026 19:33 UTC