Warning! Data of 17.5 million users worldwide leaked, dark web selling threatening account security

【Blockchain Rhythm】A large-scale data breach event has attracted attention. According to the latest report from security firm Malwarebytes, on January 11, a serious security incident occurred on Instagram—sensitive information of approximately 17.5 million users was exposed.

The leaked information covers a wide range of data, including usernames, email addresses, phone numbers, and even physical addresses. Even more concerning is that this data has already been packaged and sold on the dark web, and may be used by malicious actors for phishing attacks or account hijacking.

Malwarebytes pointed out that this incident may have originated from an API exposure vulnerability on Instagram in 2024. Affected users have already received password reset email alerts—an obvious sign of the breach. As of now, Meta has not issued any official statement or remedial measures.

For Web3 users, this event is particularly worth noting. Many people manage multiple exchange accounts with the same email. Once the email information is compromised, hackers can attempt to take over your trading accounts through “credential stuffing.” Security experts’ advice is straightforward: immediately enable two-factor authentication (2FA) and update your passwords. If you use the same email across multiple platforms, it is recommended to check and strengthen security measures for each one.