Instagram released a statement over the weekend denying its systems had been breached, though the company did confirm that external parties had been able to trigger password reset emails. So, while many customers did receive unnecessary and unprompted password reset emails, the emails themselves may have been legitimate.