Meta has fixed an Instagram password reset flaw that triggered mass emails on January 8. Malwarebytes claimed 17.5M accounts were breached, but independent analysis found only 6.2M emails.