August 19, 2026 09:21 am (IST)
Follow us:
facebook-white sharing button
twitter-white sharing button
instagram-white sharing button
youtube-white sharing button
Supreme Court rejects ‘less painful’ death penalty plea, but leaves door open for future change | ‘Vulgarity and disgust’: DMK attacks Vijay over Trisha salute at I-Day event | ‘Take Gyanesh Kumar to the US’: Congress mocks Trump over praise for India’s voter ID system | Big relief for Imran Khan: Pakistan Supreme Court orders hospital transfer amid health fears | Trump praises India’s voter ID system, pushes SAVE America Act | Trump's shock threat to bomb Oman: US President warns ally over Iran deal and Hormuz crisis | Rishabh Pant scripts history! Indian wicketkeeper-batter joins elite 100-sixes club in Test cricket | BJP reshuffles top organisation seven months after Nitin Nabin's elevation | West Bengal STF arrests suspected aide of ISI 'agent' Rana Rauf in Kolkata | ‘Very hopeful’: Indian envoy Dinesh Trivedi breaks silence on PM Tarique Rahman’s proposed India visit
Instagram
Instagram is widely used by internet users across the world. Photo: Unsplash

Instagram users on alert! 17.5 million accounts exposed in major data leak

| @indiablooms | Jan 11, 2026, at 03:10 pm

Cybersecurity firm Malwarebytes has claimed that as many as 17.5 million Instagram accounts have been affected by a major data breach, with sensitive user information allegedly being stolen and circulated on the dark web.

“Cybercriminals stole the sensitive information of 17.5 million Instagram accounts, including usernames, physical addresses, phone numbers, email addresses, and more,” Malwarebytes said in a post on X.

According to the firm, the compromised data is now available for sale on the dark web and could be exploited for a range of cybercrimes.

The reported breach has triggered a surge in password reset emails being sent to Instagram users. Malwarebytes warned that the leaked information could pave the way for more serious attacks, including phishing attempts and account takeovers, as reported by Engadget.

Meta, the parent company of Facebook and Instagram, has so far not commented on the alleged breach.

Reports suggest that the stolen data may have originated from an Instagram API leak that occurred in 2024. A threat actor using the alias “Solonik” reportedly published the dataset on BreachForums on January 7, 2026, offering it for free, according to CyberInsider.

In light of the breach, Malwarebytes has urged Instagram users to enable two-factor authentication (2FA) and remain vigilant against suspicious login attempts.

Support Our Journalism

We cannot do without you.. your contribution supports unbiased journalism

IBNS is not driven by any ism- not wokeism, not racism, not skewed secularism, not hyper right-wing or left liberal ideals, nor by any hardline religious beliefs or hyper nationalism. We want to serve you good old objective news, as they are. We do not judge or preach. We let people decide for themselves. We only try to present factual and well-sourced news.

Support objective journalism for a small contribution.