October 20, 2026 01:49 pm (IST)
Follow us:
facebook-white sharing button
twitter-white sharing button
instagram-white sharing button
youtube-white sharing button
Four killed in fresh Manipur violence as protesters take bodies to Chief Minister’s residence | Tiger Shroff firing: Three accused arrested on train in Rajasthan, suspected Bishnoi gang link emerges | 'Internet access a fundamental right for children': SC rejects age-based 'blanket' ban | 'We will fight our own government': RG Kar victim's father threatens fresh protest after Sandip Ghosh gets bail | RG Kar shocker: Sandip Ghosh gets bail as only 7 of 147 witnesses examined, junior doctor blasts CBI | Trump waives Russia-related sanctions | 'How dare Elon Musk?' Owaisi defends Modi after billionaire's 'real boss' jibe at Ambani | 'B****y S***': IAS officer's abuse of female colleague during virtual J&K meeting sparks row | Aamir Khan’s nephew Imran Khan asked to leave India by Oct 28 after joining anti-CEC protest | ‘Their crime? Demanding justice’: Rahul Gandhi slams 4 AM detention of Ankita Bhandari’s parents
Instagram
Instagram is widely used by internet users across the world. Photo: Unsplash

Instagram users on alert! 17.5 million accounts exposed in major data leak

| @indiablooms | Jan 11, 2026, at 03:10 pm

Cybersecurity firm Malwarebytes has claimed that as many as 17.5 million Instagram accounts have been affected by a major data breach, with sensitive user information allegedly being stolen and circulated on the dark web.

“Cybercriminals stole the sensitive information of 17.5 million Instagram accounts, including usernames, physical addresses, phone numbers, email addresses, and more,” Malwarebytes said in a post on X.

According to the firm, the compromised data is now available for sale on the dark web and could be exploited for a range of cybercrimes.

The reported breach has triggered a surge in password reset emails being sent to Instagram users. Malwarebytes warned that the leaked information could pave the way for more serious attacks, including phishing attempts and account takeovers, as reported by Engadget.

Meta, the parent company of Facebook and Instagram, has so far not commented on the alleged breach.

Reports suggest that the stolen data may have originated from an Instagram API leak that occurred in 2024. A threat actor using the alias “Solonik” reportedly published the dataset on BreachForums on January 7, 2026, offering it for free, according to CyberInsider.

In light of the breach, Malwarebytes has urged Instagram users to enable two-factor authentication (2FA) and remain vigilant against suspicious login attempts.

Support Our Journalism

We cannot do without you.. your contribution supports unbiased journalism

IBNS is not driven by any ism- not wokeism, not racism, not skewed secularism, not hyper right-wing or left liberal ideals, nor by any hardline religious beliefs or hyper nationalism. We want to serve you good old objective news, as they are. We do not judge or preach. We let people decide for themselves. We only try to present factual and well-sourced news.

Support objective journalism for a small contribution.