As Malwarebytes reported the breach, many users confirmed that they had indeed received password reset emails. Cybersecurity researchers, however, pointed out that Instagram had not been hacked recently and the data that is supposedly available on the dark web is from 2022.