← Instagram

6M accounts — API bug exposes phone/email

2017 6.0M records affected Share on X

Data compromised

Email addresses, Phone numbers

Technical writeup

Bug in Instagram developer API allowed scraping of phone numbers and emails. Hackers built searchable DB and sold data for Bitcoin; targeted high-profile then other users.

Root cause

Instagram API bug.

References