Threatline

Instagram - 6,215,150 breached accounts

In January 2026, . The dataset contained 17M rows of public Instagram information, including usernames, display names, account IDs, and in some cases, geolocation data. Of these records, 6.2M included an associated email address, and some also contained a phone number. The scraped data , despite coinciding in timeframe. There is no evidence that passwords or other sensitive data were compromised. data allegedly scraped via an Instagram API was posted to a popular hacking forum appears to be unrelated to password reset requests initiated on the platform