Yesterday I got from security@mail.instagram.com an email "Action Required: Your Instagram Account Has Been Locked" Currently displays https://accountscenter.instagram.com/meta_security_checkup_reactive with message "This page isn't available right now" in webbrowsers and an app The account is still available, but login looks to be disabled Have you encountered anything like this? What should to do about it?
It may have something to do with the recent security breach? This is a post on Reddit from a week ago with users talking about receiving an email Instagram: "17.5 million user account details (usernames, email addresses, phone numbers, locations, but NOT passwords) were leaked two days ago. Malwarebytes confirmed the news yesterday. The email you received was legitimately from Instagram, but initiated by a bad actor. The email is not nefarious in itself. Since no passwords were leaked in this dataset, there's no immediate risk, but there's a catch: Experts agree that this password reset was initiated by scammers as a way of checking the veracity of the records in the dataset. If Instagram allows a password reset email to be sent, it means the combination of username and email, or username and phone, are correct. You only have to worry if you use the same password in different places, because this leak can be compared to other leaks where your password is used with the same email or phone number. If you do that, start changing passwords. Your device has the ability to generate random and unique passwords for each service, website and app. Then it saves it for you conveniently behind your biometric lock. It's 2026 you don't have to remember passwords anymore, and you don't have to think about a password when setting one. And certainly you must not use the same password in two places."
Unfortunately - I know a LOT of peeps that use the SAME password for almost EVERYTHING because they hate to try to 'member 'em . . . despite many people telling them to create them via pw-generators or create phrases for certain sites / accounts unique to them (and just use the first 1-2 letters / numbers . . . damn ill-veracity of 'em scammers . . .
