Got an Instagram Password Reset Email? Here’s What It Reportedly Really Means

Discovering that you got an email from Instagram about a password reset request that you didn't make can be a very concerning situation for anyone. After all, it is hard to know how the situation could affect you and what to do next when you find yourself on the receiving end of that email. That feeling is likely to compound if you find yourself getting more than one of those emails in close succession.

Well, there is some good news for the many people who have found themselves in that situation in recent days. The good news is that those people certainly aren't alone, there is a likely explanation for why so many Instagram users are getting those emails, and you don't need to panic.

Sensitive Information Related to 17.5 Million Instagram Accounts Has Reportedly Been Stolen

Cybercriminals stole the sensitive information of 17.5 million Instagram accounts, including usernames, physical addresses, phone numbers, email addresses, and more. pic.twitter.com/LXvjjQ5VXL

— Malwarebytes (@Malwarebytes) January 9, 2026

Over the last several days, many people have been getting Instagram "Reset Your Password" emails. Social media has seen a rash of people posting about getting one of those emails or several of them over a short period of time. A Reddit thread with many responses dedicated to users concerned about Instagram password reset emails on the r/cybersecurity_help subreddit is only one example of that social media activity.

The emails in question will read like this. "Hi ____, We got a request to reset your Instagram password. (A big blue button that reads 'Reset Your Password') If you ignore this message, your password will not be changed. If you didn’t request a password reset, let us know." Confusing and alarming Instagram password reset emails are showing up for many users, and there is reportedly a reason why they’re happening.

On January 10th, 2026, Forbes published an article on the rash of password rest emails that Instagram users have been receiving. The outlet went on to update their report to state that the situation has reportedly been caused by a massive Instagram data breach.

"It now seems likely that the surge in password reset attack attempts, and I have already received a dozen in 48 hours, is related to a breaking story about a leak of 17.5 million Instagram user accounts by a threat actor on BreachForums. The alleged breach database was published hours before the attacks started." More on this development as I have it, so check back for updates.'"

In addition to Forbes reporting that the data breach is unconfirmed but likely to have happened, a major cybersecurity software company has told their users about the situation. On January 9th, 2026, MalwareBytes posted on their official X account about the reported breach. "Cybercriminals stole the sensitive information of 17.5 million Instagram accounts, including usernames, physical addresses, phone numbers, email addresses, and more."

This is a developing situation that remains unconfirmed at the time of publication. Representatives from Instagram did not immediately respond to Men’s Journal’s request for comment.

What To Do if You Are Getting Reset Your Password Emails From Instagram

The first thing to note about the rash of "Reset Your Password" emails that have been sent out to Instagram users is that phishing scams are always a concern. If you get an email about an unrequested password change, you should never assume that it is legitimate and press the links provided in the email. Phishing emails is a common tactic in which bad actors send emails that look like they are from a legitimate company. In reality, phishing emails allow them to steal information from you if you interact with them. In this case, however, it appears the emails are legitimate.

The next thing to remember is that you are getting the password reset email or emails because bad actors are trying to reset your password. That likely means that they haven't succeeded yet. It should also be noted that Instagram's password reset emails definitively state that nothing will happen to your account unless you confirm you requested the reset, which you obviously shouldn't do.

Instagram's official website offers the following advice about what to do if you get a password reset email that you didn't request. "If you do have additional security concerns, you may want to reset your password and enable two-factor authentication. Learn what you can do to make sure your account is secure." It is important to note that you should never take those kinds of actions unless you are on a trusted PC or device.