Find notable cyber news and cases, enriched with sources, timelines, and signals.

Instagram account profiles leaked online

Data Leak
First reported
Last updated
Happening score
H score 63
1 unique sources, 1 articles

Summary

Hide ▲

Instagram account profiles were scraped and leaked online, exposing data from 17,017,213 records and creating fresh risk of phishing and social engineering. The shared dataset reportedly includes phone numbers, user names, names, physical addresses, email addresses, and Instagram IDs for at least some entries. Meta says there was no new breach and users can ignore unsolicited password reset emails and text codes. The leak does not include passwords, which limits direct credential-compromise risk but not downstream abuse.

Related Happenings

Instagram account data exposed through Meta HTS recovery flaw

Data Leak
H score40 First: 08.06.2026 11:00 Last: 08.06.2026 11:00 Sources 1

About this happening: **Instagram account data** was exposed after a flaw in **Meta’s High Touch Support (HTS)** recovery flow let unauthorized third parties receive password reset links for **20,225 a...

Meta AI-powered support tools abused in Instagram account recovery flow

Security Tool/Service
H score26 First: 02.06.2026 18:47 Last: 02.06.2026 18:47 Sources 1

About this happening: **Instagram accounts** were hijacked after attackers abused **Meta’s AI-powered support tools** to pass recovery checks and change the recovery email, creating a direct failure in...

Instagram accounts for Obama White House hit by account takeover attack

Incident
H score40 First: 01.06.2026 20:32 Last: 01.06.2026 20:32 Sources 1

About this happening: The **Instagram** accounts for the **Obama White House** and the **Chief Master Sergeant of the U.S. Space Force** were briefly **defaced** after attackers abused **Meta’s AI supp...

FIFA logins traded on dark-web markets

Data Leak
H score46 First: 27.05.2026 14:28 Last: 27.05.2026 14:28 Sources 1

About this happening: Around **2,500 FIFA logins** have surfaced on **dark-web markets**, turning stolen credentials into an active exposure that can fuel account abuse and downstream fraud. The leak i...

Instagram private profiles server-side authorization failure security flaw

Vulnerability
H score14 First: 31.01.2026 16:27 Last: 31.01.2026 16:27 Sources 1

About this happening: A **server-side authorization failure** in **Instagram private profiles** exposed links to private photos in **HTML responses**, allowing **unauthenticated visitors** to reach con...

Timeline

  1. 11.01.2026 21:13 2 articles · 5mo ago

    Instagram data leak claims and Meta denial

    Initial Disclosure

    Claims emerge that data from more than 17 million Instagram accounts was scraped and released on hacking forums, with some shared records including phone numbers, user names, names, physical addresses, email addresses, and Instagram IDs. Meta says there was no breach of its systems, states it is not aware of any API incidents in 2022 or 2024, and says Instagram fixed a bug that allowed external parties to request password reset emails for some users.

    Show sources