Instagram Data Breach (2025)

Instagram API Data Scrape was reported in January 2026 after a dataset allegedly scraped via an Instagram API was posted to a popular hacking forum. The dataset contained 17M rows of public Instagram information, including usernames, display names, and account IDs, with some records also containing geolocation data. Of these, approximately 6.2M records included an associated email address and a smaller subset also contained phone numbers, with the activity appearing unrelated to Instagram password reset mechanisms despite the similar timeframe.