Instagram account profiles leaked online
Data Leak
Summary
Hide ▲
Show ▼
Instagram account profiles were scraped and leaked online, exposing data from 17,017,213 records and creating fresh risk of phishing and social engineering. The shared dataset reportedly includes phone numbers, user names, names, physical addresses, email addresses, and Instagram IDs for at least some entries. Meta says there was no new breach and users can ignore unsolicited password reset emails and text codes. The leak does not include passwords, which limits direct credential-compromise risk but not downstream abuse.
Related Happenings
Instagram account data exposed through Meta HTS recovery flaw
Data Leak
H score40
First: 08.06.2026 11:00
Last: 08.06.2026 11:00
Sources 1
About this happening:
**Instagram account data** was exposed after a flaw in **Meta’s High Touch Support (HTS)** recovery flow let unauthorized third parties receive password reset links for **20,225 a...
Instagram account data exposed through Meta HTS recovery flaw
Data LeakAbout this happening: **Instagram account data** was exposed after a flaw in **Meta’s High Touch Support (HTS)** recovery flow let unauthorized third parties receive password reset links for **20,225 a...
Meta AI-powered support tools abused in Instagram account recovery flow
Security Tool/Service
H score26
First: 02.06.2026 18:47
Last: 02.06.2026 18:47
Sources 1
About this happening:
**Instagram accounts** were hijacked after attackers abused **Meta’s AI-powered support tools** to pass recovery checks and change the recovery email, creating a direct failure in...
Meta AI-powered support tools abused in Instagram account recovery flow
Security Tool/ServiceAbout this happening: **Instagram accounts** were hijacked after attackers abused **Meta’s AI-powered support tools** to pass recovery checks and change the recovery email, creating a direct failure in...
Instagram accounts for Obama White House hit by account takeover attack
Incident
H score40
First: 01.06.2026 20:32
Last: 01.06.2026 20:32
Sources 1
About this happening:
The **Instagram** accounts for the **Obama White House** and the **Chief Master Sergeant of the U.S. Space Force** were briefly **defaced** after attackers abused **Meta’s AI supp...
Instagram accounts for Obama White House hit by account takeover attack
IncidentAbout this happening: The **Instagram** accounts for the **Obama White House** and the **Chief Master Sergeant of the U.S. Space Force** were briefly **defaced** after attackers abused **Meta’s AI supp...
FIFA logins traded on dark-web markets
Data Leak
H score46
First: 27.05.2026 14:28
Last: 27.05.2026 14:28
Sources 1
About this happening:
Around **2,500 FIFA logins** have surfaced on **dark-web markets**, turning stolen credentials into an active exposure that can fuel account abuse and downstream fraud. The leak i...
FIFA logins traded on dark-web markets
Data LeakAbout this happening: Around **2,500 FIFA logins** have surfaced on **dark-web markets**, turning stolen credentials into an active exposure that can fuel account abuse and downstream fraud. The leak i...
Instagram private profiles server-side authorization failure security flaw
Vulnerability
H score14
First: 31.01.2026 16:27
Last: 31.01.2026 16:27
Sources 1
About this happening:
A **server-side authorization failure** in **Instagram private profiles** exposed links to private photos in **HTML responses**, allowing **unauthenticated visitors** to reach con...
Instagram private profiles server-side authorization failure security flaw
VulnerabilityAbout this happening: A **server-side authorization failure** in **Instagram private profiles** exposed links to private photos in **HTML responses**, allowing **unauthenticated visitors** to reach con...
Timeline
-
11.01.2026 21:13 2 articles · 5mo ago
Instagram data leak claims and Meta denial
Initial DisclosureClaims emerge that data from more than 17 million Instagram accounts was scraped and released on hacking forums, with some shared records including phone numbers, user names, names, physical addresses, email addresses, and Instagram IDs. Meta says there was no breach of its systems, states it is not aware of any API incidents in 2022 or 2024, and says Instagram fixed a bug that allowed external parties to request password reset emails for some users.
Show sources
- Instagram denies breach amid claims of 17 million account data leak — www.bleepingcomputer.com — 11.01.2026 21:13
- Instagram denies breach amid claims of 17 million account data leak — www.bleepingcomputer.com — 11.01.2026 21:13