Have you received any sudden password reset notifications from Instagram lately? If you have, just know that it's safe to ignore because it's an error of some sort. Some of you might wonder whether it was a phishing attempt, but Instagram claimed that it wasn't. Regardless, here are some details you should be aware of.
Data breach?
According to Malwarebytes, cybercriminals have acquired sensitive information of 17.5 million Instagram users. Data stolen includes Instagram usernames, phone numbers, email addresses, and more. The info from the so-called data breach was allegedly sold on the dark web, which is why external parties have been issuing password reset requests.
Screenshot from Bleepingcomputer
Malwarebytes claimed to have found the breach during a 'routine scan' of the dark web, and that the vulnerability used to obtain the data is due to an Instagram API exposure from 2024. If true, this suggests that Instagram has failed to patch a problem that has been around for over a year. Of course, Instagram has assured users that their accounts are secure and that there was no breach.
Use two-factor authentication
If you're still worried, you can change your current password or turn on two-factor authentication for better security. The Meta Accounts Center also allows users to track devices that are logged into their accounts, so you can find out whether a suspicious device has been accessing them.
Remember to use strong passwords and change them at least once a year (or more if you can be bothered). Having said that, how often do you change your account passwords? Let us know in the comments below, and stay tuned to TechNave for more tech news.
COMMENTS