The cybersecurity firm Malwarebytes simply seen one thing disagreeable taking place over on the darkish net:
Cybercriminals stole the delicate data of 17.5 million Instagram accounts, together with usernames, bodily addresses, cellphone numbers, electronic mail addresses, and extra. This information is out there on the market on the darkish net and will be abused by cybercriminals.
— Malwarebytes (@malwarebytes.com) January 9, 2026 at 8:34 AM
Did you obtain any sudden password reset emails from Instagram recently? If the feedback on a Reddit post about this breach from a few hours ago are any indication, you’re not alone.
Plainly the bodily addresses, cellphone numbers, electronic mail addresses and different data connected to the accounts of 17.5 million Instagram customers is out there on the market within the sketchier elements of the web.
Apparently Malwarebytes performs sweeps of the darkish internet for gadgets like this, and surmised that this cache of non-public particulars is tied a 2024 API breach that seemingly allowed an attacker to pry the knowledge out of Instagram.
Some steps you may take to make sure that your data is secure embrace:
- Resetting your password proper now
- Turning on two-factor authentication should you haven’t already
- Completely deleting all social media accounts from all platforms
Thus far Instagram doesn’t seem to have revealed a press release about this challenge. Gizmodo reached out to Meta for remark, and can replace if we hear again.
Trending Merchandise
GIM Micro ATX PC Case with 2 Temper...
LG 24MP60G-B 24″ Full HD (192...
Motorola MG7550 – Modem with ...
Lenovo IdeaPad 1 Student Laptop, 15...
SAMSUNG 27″ CF39 Series FHD 1...
Wireless Keyboard and Mouse Combo, ...
MOFII Wireless Keyboard and Mouse C...
Logitech MK120 Wired Keyboard and M...
Acer Nitro 31.5″ FHD 1920 x 1...
