INSTAGRAM SAYS IT FIXED THE ISSUE THAT LET SOMEONE SEND ALL THOSE PASSWORD RESET EMAILS

Summary from the TLDR InfoSec newsletter

Instagram acknowledges that an external party exploited a flaw to trigger mass password reset emails, but insists there was no breach and that accounts remain secure, advising users to ignore the notifications