The company added that the "data is available for sale on the dark web and can be abused by cybercriminals." Malwarebytes noted in an email to its customers that it discovered the breach during its routine dark web scan and that it's tied to a potential incident related to an Instagram API exposure from 2024.

Malwarebytes claims that cybercriminals stole sensitive information of 17.5 million Instagram accounts, including usernames, physical addresses, phone numbers, email addresses, and more. This data is available for sale on the dark web and can be abused by cybercriminals.

Meta has dismissed reports of a data breach involving 17 million Instagram accounts, assuring users that their information remains secure.

Millions of Instagram users are facing heightened security concerns following the exposure of a massive trove of personal data linked to approximately 17.5 million accounts.