Hackers have put up for sale the data of 17.5 million Instagram users, including personal information, after a security breach that the company concealed.

A security breach affected 17.5 million Instagram users, and sensitive data was put up for sale on the dark web by hackers. The antivirus producer Malwarebytes discovered and announced the incident, mentioning that the sold package includes usernames, phone numbers, email addresses, and physical addresses, all of which can be used in phishing attacks. It is suspected that this data is related to an incident from 2024 concerning the platform's API. Although the law requires companies to inform authorities and users about attacks, Meta has not communicated anything regarding this incident. Users are advised to enable two-factor authentication or passkeys for enhanced security.