Indonesia probes Meta over Instagram password reset issue

Meta was summoned by Indonesia’s Ministry of Communication and Digital Affairs (Komdigi) on January 14, 2026, over concerns related to a potential data breach involving Instagram user accounts.

The issue arose from reports suggesting a possible leak linked to password reset mechanisms, prompting an investigation into whether personal data was compromised.

Komdigi explained that Meta provided an official explanation, confirming that password reset processes are internal and that no passwords have been accessed by third parties.

The ministry is still reviewing the matter to verify the accuracy of the reports, emphasizing that no user passwords have been accessed or misused.

Alexander Sabar, director-general of digital space supervision at Komdigi, said the investigation is ongoing and that the action against Meta aligns with Indonesian regulations on electronic systems and transactions.

Komdigi urged the public to remain calm and cautious amid circulating unverified information and pledged to strengthen oversight of digital platforms.

🔗 Source: INews

🧠 Food for thought

Implications, context, and why it matters.

Key details of the alleged Instagram leak remain unverified

The exact type of data involved and the scale of any exposure have not been confirmed.
The concern has been linked to Instagram’s password reset mechanism, yet any access to user data by outsiders has not been established; Instagram said it is still conducting further tracing following a third-party report.
The number of Indonesian users who may have been affected has not been shared.
Government Regulation No. 71 of 2019 on the Implementation of Electronic Systems and Transactions was cited by Komdigi, though any enforcement steps or penalties under review have not been specified.

Komdigi summons Meta amid tighter oversight in Indonesia

Indonesia’s Ministry of Communication and Digital (Komdigi) summoned Meta, Instagram’s operator, for clarification after reports circulated about a suspected user data leak tied to the password reset mechanism.
Komdigi relayed Instagram’s position that the password reset process is an internal system procedure and does not provide password access to anyone other than the account owner. The ministry also reported no sign of outside misuse of the reset feature, while tracing continues.
Komdigi described the summons as part of state authority under Government Regulation No. 71 of 2019 on the Implementation of Electronic Systems and Transactions.