Cybersecurity firm Malwarebytes reported that personal data of about 17.5 million Instagram users has been leaked and shared on the dark web. The leaked dataset includes usernames, full names, email addresses, phone numbers, partial physical addresses, and other contact details. The breach has raised serious concerns about user privacy and platform security.

According to Malwarebytes, although no passwords were exposed, the leaked information could still be exploited for identity theft or financial fraud. A hacker using the alias 'Solonik' reportedly released the data for free on a dark web forum last week. Following the leak, users from various regions have complained about receiving numerous password reset emails, which analysts believe may be linked to unauthorized login attempts using the exposed email addresses.

Meta, Instagram’s parent company, denied any direct hacking or intrusion into its systems. The company attributed the surge in password reset emails to a technical issue and assured that user accounts remain secure.