Instagram denies data breach after mass password reset email sent
Instagram has denied it suffered a data breach after sending password reset emails to a large number of users, according to the BBC.
The company said the messages were caused by a problem that allowed third parties to legitimately request password reset emails. It stressed, however, that its systems were not compromised and that users' accounts remain secure.
Despite these assurances, some cybersecurity experts, as well as users of the platform, have questioned Instagram's explanation. They have argued that the emails may be related to a data leak or the recycling of old user details circulating online.
The situation has caused widespread confusion, with many users unsure whether the messages were legitimate or part of a scam.
Commentary by Jake Moore , Global Security Advisor at ESET
"Users should remain vigilant for potential future attacks and be extra cautious with any form of communication, especially emails or messages that appear to come from Instagram in the coming weeks. This is often how cybercriminals try to extract more information."
It is best to ignore password reset emails unless the user has requested the change themselves. Fraudsters may also attempt to trick users into clicking on links or downloading attachments . Vigilance remains critical after any incident, no matter how old the attack is.
Cybercriminals can do a lot of damage with a little personal data. That’s why it’s vital that users are aware of both current and past data breaches, know how to reset their passwords, and enable two-factor authentication for peace of mind.”
*Disclaimer: ESET is not responsible for the accuracy of the information contained in the article.
Although the press releases will range from very select to rare, I said I'd pass...because sometimes the editors hide.
