Live data from Hacker News

Instagram data breach reportedly exposed the personal info of 17.5M users

engadget.com

1–10 of 63 posts

Re: Instagram data breach reportedly exposed the personal info of 17.5M users

#4
post #3

> the leak included Instagram usernames, physical addresses, phone numbers, email addresses and more.

Have not used Instagram in a decade - sincerely curious why would a physical address be part of the leaked data? Are users actually required or voluntarily provide this information to Facecrook?

Re: Instagram data breach reportedly exposed the personal info of 17.5M users

#7

Someone tried to get into my account 2 days ago by attempting to reset it with “forgot password” That’s never happened to me before, wonder if it’s related

Yes, it happened a couple of days ago on my hidden non active account. I had it for 13 years and it never happened before.

Re: Instagram data breach reportedly exposed the personal info of 17.5M users

#8

Someone tried to get into my account 2 days ago by attempting to reset it with “forgot password” That’s never happened to me before, wonder if it’s related

Wow, exactly the same issue for me, and for two different accounts of mine!

Re: Instagram data breach reportedly exposed the personal info of 17.5M users

#9
post #3

> the leak included Instagram usernames, physical addresses, phone numbers, email addresses and more.

Have not used Instagram in a decade - sincerely curious why would a physical address be part of the leaked data? Are users actually required or voluntarily provide this information to Facecrook?

My guess is that it might a couple things:

1. There's a map feature where users can assign their location to a photo that was taken. I suppose this could qualify as 'physical address'.

2. Businesses often have their physical addresses as part of their profile.

Re: Instagram data breach reportedly exposed the personal info of 17.5M users

#10
This news answers a bunch of questions I’ve had.

I’ve got an Instagram burner I literally never use. Never clicked weird links, never logged in anywhere sketchy, so a phishing compromise makes zero sense. If my info got out, it likely came from Instagram’s side, not mine.

What’s interesting is the timing pattern. I started getting “reset your password” emails in early 2023, then they’d come in waves. It feels like the creds were getting resold and different people were taking turns running the same list. The emails were in different languages too, which tracks with whoever was firing off the requests.

Got another reset attempt a couple days ago. Congrats to the latest buyer: you bought pure schwag. Whatever value was in that list got milked long before it ended up public.

Post reply on HN