Instagram Fixes Password Reset Flaw That Exposes User Emails and Phone Numbers

A logic bug in the Instagram web-based password reset interface recently exposed unredacted email addresses and phone numbers of users. Meta deployed an emergency hotfix to resolve the vulnerability after proof-of-concept screenshots highlighted the significant privacy risk.