Instagram says it fixed a bug that allowed threat actors to mass-request password reset emails, amid claims that data from more than 17 million Instagram accounts was scraped and leaked online.

Instagram data linked to nearly 17.5 million users is reportedly being sold on the dark web, raising concerns over phishing, account takeovers and user privacy.

For a long time, Instagram was known for its grid of square photos, but Instagram head Adam Mosseri says “that feed is dead” – and it has been for years. In a post at the start of 2026, Mosseri shared insight into how aesthetics are changing – and how that is both going to affect creators and the social media platform moving forward.

Want to hide someone's activity on Instagram without blocking them? Now you can. National attention on mental health has put pressure on social media giants like Instagram to address safety and security on their platforms. What is Instagram doing in response?

We fixed an issue that let an external party request password reset emails for some people. There was no breach of our systems and your Instagram accounts are secure. You can ignore those emails — sorry for any confusion.