A data leak affecting 17.5 million Instagram users has been claimed, leading to an increase in password reset scams. However, Meta denied any hack, attributing it to a technical glitch. Nevertheless, this incident highlights the growing threat to online safety and the importance of securing your account. Let's tell you how you can keep your account safe.

Instagram Data Breach: A major cybersecurity warning has emerged for Instagram users. A recent data leak has exposed the information of millions of accounts, putting people's private data at risk. The situation has become even more serious because hackers are taking advantage of this opportunity to launch password reset attacks to gain control of accounts. On Saturday evening (Indian time), cybersecurity company Malwarebytes claimed that a large amount of data was stolen from Meta's social media platform, Instagram. According to the company, the personal information of approximately 17.5 million users was hacked and leaked.

What was the company's response?

Even after the Malwarebytes report, Meta has not confirmed any data leak. The company stated that there was a technical glitch that allowed an external party to send password reset emails to some Instagram users. They clarified that there was no breach in their systems and that users' Instagram accounts are completely safe.

This incident shows that the threat of cyber fraud and hacking on social media is constantly increasing, and it has become crucial to keep your account safe in today's digital age. Today, we are going to tell you some ways to help you keep your account safe.

How to keep your Instagram account safe?

Cybercriminals stole the sensitive information of 17.5 million Instagram accounts, including usernames, physical addresses, phone numbers, email addresses, and more. pic.twitter.com/LXvjjQ5VXL

— Malwarebytes (@Malwarebytes) January 9, 2026

Enable Two-Factor Authentication (2FA)

Go to Instagram Settings and enable 2FA in the Security section. This will require you to enter a code received on your mobile phone or in the app, along with your password. This will prevent anyone else from easily logging into your ID. Use strong and unique passwords

Create a password with at least 12 characters, including uppercase and lowercase letters, numbers, and symbols. Don't use your name, date of birth, or the same password everywhere. If anything seems suspicious, change your password immediately.

Avoid fake links and messages

Don't click on links in unknown DMs, emails, or comments, even if they claim your account is about to be closed. Always check notifications and alerts directly within the Instagram app.

Monitor your login activity

Go to Settings > Security > Login Activity to see where your account has been accessed from. If you see any unfamiliar devices or locations, log out immediately and update your email and phone number.

Strengthen your privacy settings

Make your account private, control who can message or tag you, hide your online status, and run a Security Checkup in the Accounts Center to quickly address any vulnerabilities.