Excerpt from NDTV Article, Published on Jan 11, 2026
A major Instagram data leak has raised serious concerns across the cybersecurity community. Malwarebytes revealed that hackers exposed details linked to nearly 17.5 million user accounts on online forums. Although attackers did not access passwords, the leaked data still puts users at risk.
The leaked records include usernames, email addresses, phone numbers, partial location details, and account – related metadata. Attackers can exploit this information to run phishing campaigns or impersonation scams. In many cases, such attacks appear highly convincing because they rely on real user data.
Additionally, security researchers observed that the dataset followed a structured format. This pattern suggests automated scraping or misuse of an exposed API rather than a direct breach of Meta’s internal systems. Malwarebytes discovered the data while monitoring underground hacker forums. Soon after, a threat actor shared the dataset publicly. The actor released the files in both JSON and text formats, which made access easier for cybercriminals.
Because of this, security teams urged users to stay alert. Even without passwords, attackers can still attempt account takeovers using leaked contact information. Meta, which owns Instagram, stated that its internal systems remained secure. However, the company confirmed that a technical flaw allowed unauthorized password reset emails to reach some users. Meta fixed the issue soon after identifying it.
Despite this clarification, several users reported receiving reset emails they never requested. This activity raised further concern about misuse of exposed data. Users should take quick action to reduce potential harm. First, change your account password and avoid reusing old ones. Next, enable two – factor authentication through an authenticator app. Also, ignore suspicious emails that claim to come from Instagram. Most importantly, review your security settings regularly. Proactive steps can significantly reduce the chances of account misuse.
To delve deeper into this topic, Visit NDTV WORLD .
