Source posted on 9-jan: https://news.ycombinator.com/item?id=46571968
Instagram response posted on 11-jan: "We fixed an issue that let an external party request password reset emails for some people. There was no breach of our systems and your Instagram accounts are secure. You can ignore those emails — sorry for any confusion" https://xcancel.com/instagram/status/2010202301886238822?s=2...
>Source posted on 9-jan: https://news.ycombinator.com/item?id=46571968
Yeah the source is terrible. I'd expect at least some sort of explanation on how they arrived at that conclusion, eg. "someone on breachforums claims to have it for sale" or "some whistleblower at instagram reported". If it's the former, it's possible that instagram themselves aren't at fault, eg. they got it via phishing or credential stuffing.
I received a password reset request email just yesterday. Not sure what they fixed.
I get email reset passwords from IG at least once a month.
I doubt they fixed anything. Lol