Over 17.5 million Instagram accounts have been affected by a massive data leak, with usernames, full names, emails, phone numbers, and partial addresses exposed. Cybersecurity researchers discovered the data circulating on dark web forums, potentially originating from an Instagram API leak in 2024. The exposed information increases the risk of impersonation, phishing, and credential harvesting. The FBI has previously warned about threat actors exploiting password reset mechanisms by posing as employees to gain account access.