Instagram has confirmed the resolution of a technical glitch that led to millions of users receiving unexpected password reset emails in January. According to the company's statement, the problem stemmed from an external party being able to initiate real password reset requests without users' permission.
The editorial team reports that Meta has stated no internal systems were compromised during this incident. The company emphasized that accounts are considered secure if the user has not personally accessed the password reset link and changed their password.
During the incident, claims of data leaks affecting 17.5 million Instagram accounts also caused concern among users. Security experts have clarified that this information was obtained through open data collection in 2022 or 2024 and does not include passwords.
Experts advise users to ignore suspicious password reset emails, carefully check the sender's address, and only trust emails coming from the @mail.instagram.com domain. Simultaneously, enabling two-factor authentication, reviewing account logins, and changing similar passwords used on other platforms are considered crucial for enhancing security.