Reports have emerged about an alleged data leak affecting more than 17.5 million Instagram users. According to CyberInsider, citing Malwarebytes, a database found on the dark web allegedly contains usernames, real names, email addresses, phone numbers, partial physical addresses and other contact information.
The report states that passwords were not included in the leaked database. However, the exposed information could still be used for phishing attacks, account recovery attempts and other social engineering schemes.
According to the publication, cybercriminals may use the database to send fake messages claiming that an Instagram account has been compromised and urging users to reset their password through a malicious link.
Users are advised to change their Instagram password (even if they have not received suspicious messages), enable two-factor authentication (2FA), avoid clicking links in such messages and access Instagram only through the official app or website.
At the time of publication, Meta has not confirmed the alleged data leak and has not issued any official statement. The reported incident is therefore based on CyberInsider's publication citing Malwarebytes and remains unconfirmed by Meta.
Source: CyberInsider
