A major data exposure incident has reportedly impacted around 17.5 million Instagram user accounts, with sensitive personal information now circulating on dark web marketplaces. The issue was highlighted earlier this week by cybersecurity firm Malwarebytes, triggering serious concerns about user privacy, account security, and the potential for large scale abuse.
What Information Was Exposed
According to Malwarebytes, the leaked dataset contains a combination of personal details that significantly increases the risk of misuse. Exposed data reportedly includes Instagram usernames, email addresses, phone numbers, and partial physical location details.
This mix of information can be exploited for identity theft, targeted phishing, and social engineering attacks, especially when attackers can directly link contact details to active social media accounts.
Active Exploitation on the Dark Web
Malwarebytes has confirmed that the stolen database is actively being traded on underground forums and dark web marketplaces. Screenshots circulating online show listings advertising a database of 17.5 million Instagram accounts, allegedly scraped worldwide during late 2024.
Multiple users have already reported receiving genuine looking Instagram password reset notifications, indicating that threat actors are attempting to take over accounts using the leaked data.
How Cybercriminals May Abuse the Data
With access to emails and phone numbers linked to Instagram profiles, attackers can launch highly convincing phishing campaigns. These messages may impersonate Instagram or Meta, urging users to reset passwords or verify accounts, ultimately tricking victims into handing over credentials.
The data seller, using the alias “Subkek,” claims the information was freshly scraped within the last three months of 2024 through public APIs and country specific sources. Listings show sample records containing usernames, full email addresses, phone numbers, and partial location data.
Found this article interesting? Follow us on X (Twitter) , Facebook, Blue sky and LinkedIn to read more exclusive content we post.
