Instagram Data Breach

Not every incident involves stolen passwords. In this Instagram related event, a large collection of profile information was gathered and shared after being obtained through automated access to platform features, often referred to as data scraping.

The dataset was posted on a well known hacking forum and was described as coming from an Instagram API. While much of the content appears to be based on public profile details, the problem is that it was aggregated at scale, making it far easier to search, filter, and misuse.

The exposed fields included usernames and display names, and some entries also contained geolocation information. For a portion of accounts, an email address was present, and some records reportedly included a phone number as well.

The figures discussed included millions of rows overall, with about 6.2 million entries containing an associated email address. There is no sign that passwords were accessed, but the presence of email addresses, phone numbers, and location data can still increase the chance of targeted scams and unwanted contact.