Instagram Data Breach: 17.5 Million Subscribers’ Information Exposed
A recent alert raised by the security company Malwarebytes has revealed that the sensitive information of approximately 17.5 million Instagram subscribers may have fallen into the wrong hands. The company published a post on the Bluesky social network, warning of the presence of sensitive data “for sale on the dark web”. This has sparked concerns about the safety and security of the platform.
Denial of Breach by Instagram
Following the post, Instagram denied any violation, reiterating the safety of the platform. However, according to Malwarebytes’ research, the stolen archives include usernames, passwords, phone numbers, and residential addresses, which are believed to be the result of an attack that occurred in 2024. This data could potentially be used for malicious purposes, such as scam email campaigns.
Experts have identified several forums on Reddit with reports of emails containing requests to change the social network’s password. These emails are disguised as official Instagram accounts, asking users to change their password, which could lead to hackers taking control of the profiles. Meta, the operator of the app, has denied the breach, explaining that password change emails received in recent days were due to “an issue that allowed an external party to request password resets for some users”. The company reassured users that “there was no breach of our systems and your Instagram accounts are safe”.
Recommendations for Users
Despite the denial of the breach, experts recommend that users take extra precautions to secure their accounts. Activating two-factor access is highly recommended, which requires a second temporary code, received via text message or via an authentication app, in addition to the password. This adds an extra layer of security, making it more difficult for third parties to gain unauthorized access to accounts.
For more information on this incident, users can refer to the original report by Malwarebytes and the response from Meta. It is essential for users to remain vigilant and take necessary steps to protect their online presence. As the situation develops, it is crucial to stay informed and follow best practices for online security. For the latest updates, visit Here

