Instagram Users' Sensitive Info Stolen, Sold on Dark Web
In a disturbing turn of events, cybersecurity firm Malwarebytes has revealed that hackers stole the personal details of 17.5 million Instagram users, including physical addresses and phone numbers, in an API breach from last year.
The compromised data is now being sold on the dark web, where it can be exploited by malicious actors to carry out phishing attacks or other forms of cybercrime. Meanwhile, many Instagram users are receiving unexpected password reset emails, sparking fears about their online security.
According to Malwarebytes, this cache of sensitive information may have originated from a 2024 API breach that allowed hackers to access Instagram's user data. The cybersecurity firm is now warning users to take immediate action to protect themselves.
So, what can you do? First and foremost, reset your password right away. If you haven't already, turn on two-factor authentication to add an extra layer of security. And if you're concerned about the safety of your accounts across multiple platforms, consider permanently deleting all social media accounts from all platforms.
However, it seems Instagram itself has yet to address this issue directly. It wasn't until our requests for comment that a spokesperson issued a statement assuring users that there was no breach of their systems and people's accounts remain secure. The emails were, in fact, a result of an external party requesting password reset information, which the platform promptly fixed.
But with sensitive info now being sold on the dark web, it's clear this is more than just a technical issue – it's a matter of online safety and security.
In a disturbing turn of events, cybersecurity firm Malwarebytes has revealed that hackers stole the personal details of 17.5 million Instagram users, including physical addresses and phone numbers, in an API breach from last year.
The compromised data is now being sold on the dark web, where it can be exploited by malicious actors to carry out phishing attacks or other forms of cybercrime. Meanwhile, many Instagram users are receiving unexpected password reset emails, sparking fears about their online security.
According to Malwarebytes, this cache of sensitive information may have originated from a 2024 API breach that allowed hackers to access Instagram's user data. The cybersecurity firm is now warning users to take immediate action to protect themselves.
So, what can you do? First and foremost, reset your password right away. If you haven't already, turn on two-factor authentication to add an extra layer of security. And if you're concerned about the safety of your accounts across multiple platforms, consider permanently deleting all social media accounts from all platforms.
However, it seems Instagram itself has yet to address this issue directly. It wasn't until our requests for comment that a spokesperson issued a statement assuring users that there was no breach of their systems and people's accounts remain secure. The emails were, in fact, a result of an external party requesting password reset information, which the platform promptly fixed.
But with sensitive info now being sold on the dark web, it's clear this is more than just a technical issue – it's a matter of online safety and security.
Oh man, this is super concerning! I'm glad Malwarebytes stepped up to alert us about this 
. The fact that 17.5 million people's info was stolen and sold on the dark web is just... wow 
. I feel like we're living in a cybercrime nightmare right now.
! And two-factor auth is a must 
. I'm also thinking of deleting all my social media accounts and just taking a break from the internet for a while... but that's just me 
.
. Online safety and security is so important right now 
. Let's all stay vigilant and look out for each other! 
this is literally insane how many people got hacked and their info stolen already 
two-factor auth is a lifesaver too 
anyway, let's all just take some extra precautions online and keep our accounts safe 
.
.
. I mean, they're basically saying their systems are secure, but the fact that sensitive info is being sold on the dark web tells a different story 
. I think we should be holding Instagram accountable for not having better security measures in place 
.
- I'm not surprised, our passwords are literally as easy to guess as 'qwerty' 
... 60% of those affected are under 30 
, which is kinda worrisome considering that's like a whole gen of people 
. also, did u know that the avg person loses around $2 to phishing attacks? 
so yeah, this is no joke 
& i'm not surprised instagram took a while to address it 
... btw, did u see that 99% of phishing emails are spam? 
and now its being sold on the dark web 
i mean idk if they're just trying to cover themselves up or somethin but this is super scary for ppl whose accounts are on there 
. so yeah, reset ur password ASAP & turn on 2FA or whatever, but let's get real, instagram needs to step up their game & keep our info safe!!! 
like what even is the point of having social media if ppl r just gonna steal ur info? 
like what happened here was an API breach last year but no one did anything about it until now? I think Instagram needs to do more than just send out generic statements, they need to be transparent about what went wrong and how they plan to prevent it from happening again in the future. 
. And omg, deleting social media accounts altogether? That's a bit extreme, but I get why people would wanna do that 
. The thing that bothers me most is that Instagram's response was kinda shady 
2FA all the way 
and it got me thinking about how my grandma used to play the piano when I was little 
. She had these super old records that were like, from the 50s or something 
. Anyway, what's with all these password reset emails people are getting? Can't we just use a password manager or something? 
. And have you seen those ads on Instagram that are just like, "your data is safe"... yeah right 
. I mean, is 17.5 million people worth it? I'm just saying...
. I mean, what's the point of having two-factor auth if you're just gonna sell all that data on the dark web? 
. Instagram needs to step up and tell us more about this breach than just some vague statement 
. Where's the proof, man? I need sources 
. This whole thing reeks of negligence 
. Just can't trust these platforms anymore... 
what are we gonna do? It's not just Instagram either, it's all these other platforms too... Facebook, Twitter, TikTok... my accounts are all connected to each other 
and now it's just 2025... what happened?!