6.22M accounts from Instagram (instagram.com) were exposed in this breach. Besides email addresses, it included display names, geographic locations and phone numbers.
Was your email address in this breach?
We display where your address leaked and what went with it. We never store the address.
We don't store your address. It is checked right here against about 1029 breaches, including this one.
Display namesEmail addressesGeographic locationsPhone numbersUsernames
In January 2026, data allegedly scraped via an Instagram API was posted to a popular hacking forum. The dataset contained 17M rows of public Instagram information, including usernames, display names, account IDs, and in some cases, geolocation data. Of these records, 6.2M included an associated email address, and some also contained a phone number. The scraped data appears to be unrelated to password reset requests initiated on the platform, despite coinciding in timeframe. There is no evidence that passwords or other sensitive data were compromised.
Source: Have I Been Pwned (CC BY 4.0)