11–20 of 63 posts
Someone tried to get into my account 2 days ago by attempting to reset it with “forgot password” That’s never happened to me before, wonder if it’s related
"If you received a bunch of password reset requests from Instagram recently, you're not alone."
Instagram response posted on 11-jan: "We fixed an issue that let an external party request password reset emails for some people. There was no breach of our systems and your Instagram accounts are secure. You can ignore those emails — sorry for any confusion" https://xcancel.com/instagram/status/2010202301886238822?s=2...
> the leak included Instagram usernames, physical addresses, phone numbers, email addresses and more.
Have not used Instagram in a decade - sincerely curious why would a physical address be part of the leaked data? Are users actually required or voluntarily provide this information to Facecrook?
Source posted on 9-jan: https://news.ycombinator.com/item?id=46571968 Instagram response posted on 11-jan: " We fixed an issue that let an external party request password reset emails for some people. There was no breach of our systems and your Instagram accounts are secure. You can ignore those emails — sorry for any confusion " https://xcancel.com/instagram/status/2010202301886238822?s=2...
I doubt they fixed anything. Lol
This news answers a bunch of questions I’ve had. I’ve got an Instagram burner I literally never use. Never clicked weird links, never logged in anywhere sketchy, so a phishing compromise makes zero sense. If my info got out, it likely came from Instagram’s side, not mine. What’s interesting is the timing pattern. I started getting “reset your password” emails in early 2023, then they’d come in waves. It feels like th…
Nobody is buying your account specifically, they're buying it bulk. At that scale the fact that a percentage of accounts are fake/burner/bots is baked whatever the buyer is expecting. If anything, the bigger issue is bot accounts, not random privacy-oriented people's burner accounts.
Source posted on 9-jan: https://news.ycombinator.com/item?id=46571968 Instagram response posted on 11-jan: " We fixed an issue that let an external party request password reset emails for some people. There was no breach of our systems and your Instagram accounts are secure. You can ignore those emails — sorry for any confusion " https://xcancel.com/instagram/status/2010202301886238822?s=2...
Yeah the source is terrible. I'd expect at least some sort of explanation on how they arrived at that conclusion, eg. "someone on breachforums claims to have it for sale" or "some whistleblower at instagram reported". If it's the former, it's possible that instagram themselves aren't at fault, eg. they got it via phishing or credential stuffing.
The original Malwarebytes tweet is incredibly generic.