Instagram account profiles leaked online
Data Leak
Summary
Hide ▲
Show ▼
Instagram account profiles were scraped and leaked online, exposing data from 17,017,213 records and creating fresh risk of phishing and social engineering. The shared dataset reportedly includes phone numbers, user names, names, physical addresses, email addresses, and Instagram IDs for at least some entries. Meta says there was no new breach and users can ignore unsolicited password reset emails and text codes. The leak does not include passwords, which limits direct credential-compromise risk but not downstream abuse.
Related Happenings
Instagram account data exposed through Meta HTS recovery flaw
Data Leak
H score40
First: 08.06.2026 11:00
Last: 08.06.2026 11:00
Sources 1
About this happening:
Instagram account data was exposed after a flaw in Meta’s High Touch Support (HTS) recovery flow let unauthorized third parties receive password reset links for 20,225 a...
Instagram account data exposed through Meta HTS recovery flaw
Data LeakAbout this happening: Instagram account data was exposed after a flaw in Meta’s High Touch Support (HTS) recovery flow let unauthorized third parties receive password reset links for 20,225 a...
Meta AI-powered support tools abused in Instagram account recovery flow
Security Tool/Service
H score26
First: 02.06.2026 18:47
Last: 02.06.2026 18:47
Sources 1
About this happening:
Instagram accounts were hijacked after attackers abused Meta’s AI-powered support tools to pass recovery checks and change the recovery email, creating a direct failure in...
Meta AI-powered support tools abused in Instagram account recovery flow
Security Tool/ServiceAbout this happening: Instagram accounts were hijacked after attackers abused Meta’s AI-powered support tools to pass recovery checks and change the recovery email, creating a direct failure in...
Instagram accounts for Obama White House hit by account takeover attack
Incident
H score40
First: 01.06.2026 20:32
Last: 01.06.2026 20:32
Sources 1
About this happening:
The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced after attackers abused Meta’s AI supp...
Instagram accounts for Obama White House hit by account takeover attack
IncidentAbout this happening: The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced after attackers abused Meta’s AI supp...
FIFA logins traded on dark-web markets
Data Leak
H score46
First: 27.05.2026 14:28
Last: 27.05.2026 14:28
Sources 1
About this happening:
Around 2,500 FIFA logins have surfaced on dark-web markets, turning stolen credentials into an active exposure that can fuel account abuse and downstream fraud. The leak i...
FIFA logins traded on dark-web markets
Data LeakAbout this happening: Around 2,500 FIFA logins have surfaced on dark-web markets, turning stolen credentials into an active exposure that can fuel account abuse and downstream fraud. The leak i...
Instagram private profiles server-side authorization failure security flaw
Vulnerability
H score14
First: 31.01.2026 16:27
Last: 31.01.2026 16:27
Sources 1
About this happening:
A server-side authorization failure in Instagram private profiles exposed links to private photos in HTML responses, allowing unauthenticated visitors to reach con...
Instagram private profiles server-side authorization failure security flaw
VulnerabilityAbout this happening: A server-side authorization failure in Instagram private profiles exposed links to private photos in HTML responses, allowing unauthenticated visitors to reach con...
Timeline
-
11.01.2026 21:13 2 articles · 6mo ago
Instagram data leak claims and Meta denial
Initial DisclosureClaims emerge that data from more than 17 million Instagram accounts was scraped and released on hacking forums, with some shared records including phone numbers, user names, names, physical addresses, email addresses, and Instagram IDs. Meta says there was no breach of its systems, states it is not aware of any API incidents in 2022 or 2024, and says Instagram fixed a bug that allowed external parties to request password reset emails for some users.
Show sources
- Instagram denies breach amid claims of 17 million account data leak — www.bleepingcomputer.com — 11.01.2026 21:13
- Instagram denies breach amid claims of 17 million account data leak — www.bleepingcomputer.com — 11.01.2026 21:13