Instagram Fixes Password Reset Vulnerability Amid User Data Leak

The social media platform confirmed that the issue allowed third parties to send password reset emails to Instagram users.

Social media giant Meta on Sunday confirmed an Instagram password reset vulnerability but denied being breached, amid claims that Instagram users’ data has been leaked online.

The resolved vulnerability, the company said on X, allowed third parties to send password reset requests to Instagram users.

“We fixed an issue that allowed an external party to request password reset emails for some Instagram users,” a Meta spokesperson told SecurityWeek.

While the company has not shared further details on the weakness, many users complained on X about receiving such emails.

Some users said they have been receiving them for a long time, others received them across multiple Meta products, while others said the recent messages were sent to a “mail list” and were ignored.

“We want to reassure everyone there was no breach ...