Massive Instagram Data Breach Exposes Personal Details of 17.5 Million Users
ID: 9ba2ed55-9c1b-5ca3-852a-612ed0d17915
STIX ID: report--9ba2ed55-9c1b-5ca3-852a-612ed0d17915
Feed Name: GBHackers
Threat Score
A dataset of 17.5 million Instagram accounts containing usernames, full email addresses, phone numbers and partial locations was advertised on dark-web marketplaces after being scraped via public APIs and public profiles; Malwarebytes confirmed the leak and users have reported genuine password-reset notifications indicating active exploitation. The exposed PII enables credential stuffing, SIM swapping and targeted phishing, and observers note the incident highlights API security weaknesses in Instagram/Meta.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.