Many Instagram users have been receiving unprompted password reset emails after a hacker posted about a leak of 17.5 million user accounts on BreachForums just hours before these emails began.
These emails are coming directly from Instagram/Meta, with the hackers hoping that the recipient will click the reset link without thinking and change their password, giving the hacker a better chance to guess your login and gain access.
Instagram has addressed these emails in a social media post, stating the issue of allowing “external parties” to request password resets just by knowing the account’s email has been fixed. The social media giant has assured that there were no breaches to their systems, and user accounts remain secure. Instagram has not yet addressed the 17.5 million account leak on BreachForums.
(–Source: Forbes
Read More: Instagram Password Reset Attacks — What You Need To Know And Do Now )
Patient health portal, Manage My Health, experienced one of the largest privacy breaches in New Zealand history at the end of 2025 after hackers gained access to more than 120,000 New Zealanders’ private medical information stored in their systems.
On December 30th, a threat actor posted claims of breaching the patient portal platform and possessing 108GB of data. The post included a ransom demand for $60,000 USD with a deadline of Jnauary 15th (this deadline was later moved forward to January 6th).
Once the company confirmed they had been breached, they began quickly notifying patients and confirmed that the “coding issue” which enabled the hacker’s access had been repaired. The ransom deadline passed without incident, and shortly after, the hacker removed all mentions of Manage My Health from their online presence.
The data that was supposedly compromised includes names, medical records, test results, prescription details, and more.
(– Source: RNZ on MSN
Read More: Manage My Health data breach: A timeline of what happened, and everything we know so far )
324,000 users of popular cybercrime site BreachForums have had their usernames, registration dates, IP addresses, and other information leaked in a data breach.
While many of the IP addresses map to a local loopback IP address and aren’t of much use, there are still 70,000+ IP addresses included in the data that could potentially be used to identify users.
It’s currently unknown who leaked the information and why.
(–Source: TechRadar Pro on MSN
Read More: Hacking hub BreachForums hit by data breach – 324,000 accounts exposed )
Oregon healthcare providers CareOregon and Health Share of Oregon have notified patients about an incident from October 2025 in which some patient health data was accessed without permission.
It’s unclear if this was an internal issue or carried out by hackers, or how many patients have been affected, but the potentially compromised data includes names, birth dates, health plan information, Medicaid/Medicare numbers, and primary care provider offices.
CareOregon and Health Share of Oregon have been unable to determine if any stolen data had been misused, but is advising patients to stay alert.
(–Source: HIPAA Journal
Read More: CareOregon and Health Share of Oregon Warn of Potential Insurance Fraud After Data Breach )
