Personal Info on 17.5 Million Users May Have Leaked to Dark Web After 2024 Instagram Breach

An anonymous reader shared this report from Engadget: If you received a bunch of password reset requests from Instagram recently, you're not alone. As reported by Malwarebytes, an antivirus software company, there was a data breach revealing the "sensitive information" of 17.5 million Instagram users. Malwarebytes added that the leak included Instagram usernames, physical addresses, phone numbers, email addresses and more.

The company added that the "data is available for sale on the dark web and can be abused by cybercriminals." Malwarebytes noted in an email to its customers that it discovered the breach during its routine dark web scan and that it's tied to a potential incident related to an Instagram API exposure from 2024.

Yet another reason....

[Ritz_Just_Ritz]

not to consume Instagram.

Re:Yet another reason....

[alvinrod]

The same can be said for most services that exist to collect your personal data and sell it to advertisers. Arguments can be made about not storing this information in the first place, but no company can leak what you don't give them. I e never been able to understand why so many people freely and willingly give all of this away.

Re:

[PPH]

why so many people freely and willingly give all of this away.

Because these services keep pestering people to provide more personal information. And eventually people wear out and hand it over. 'Bots never tire.

Except for people like me, who get a visceral thrill out of being obstinate. Even what it's just to a 'bot, who has no emotions.

Re:

[spudnic]

That doesn't mean you have to give them real information. I have a couple of whole personas that I use that satisfy these sites without giving out my pertinant information.

Re:

[ArchieBunker]

I had an account back when it was a polaroid filter app. Took one picture and haven’t used it since.

Is That Bad?

[SlashbotAgent]

I always post pictures of my passwords on Instagram so that I can find them when I need them.

Re:

[Smonster]

If you are in the San Francisco Bay Area and looking for a good time, call: [phone]

I hope people learned their lesson.

[Smonster]

Why on earth would anyone but a business give there any, or at least a real, phone number and physical address on their social media account? They don’t even have my real name.

Joke is on you

[Slashythenkilly]

Non IG, FB, X, Linked in or other bs "social media acct user.

Well that explains it..

[kellin]

My wife and her friend got text message alerts from Instagram saying someone was asking for a password reset a few days ago and I got an email yesterday... So now we know why.