Instagram alerted verified users earlier this week about a security flaw that could givehackers access to their personal information.
They told the users that it had fixed the issue.
But it appears the bug was exploited before Instagram’s fix, and affected more than the most high-profile accounts.
On Friday, Instagram CTO Mike Krieger published a blog post alerting all users of the security flaw.
“Although we cannot determine which specific accounts may have been impacted, we believe it was a low percentage of Instagram accounts. We want to reiterate that no passwords were exposed in this issue,” the company said in a statement.
A spokesperson told CNN Tech they are aware individuals are trying to sell the information, and the company is working with law enforcement.
Hackers are selling email and phone number data allegedly belonging to Instagram accounts that they say they scraped before the flaw was fixed. People can look for usernames on a searchable database and buy personalized data for $10 each. The website can’t be accessed by traditional web browsers.
The hackers claim to have personal information associated with over 6 million accounts. The manager of the database said he heard about the Instagram vulnerability on a private chat room, and accessed the data on August 25.
This person sent CNN Tech a list of 1,000 purported Instagram accounts and associated data, and CNN Tech was able to confirm that some of the emails included were used by existing Instagram accounts.
Facebook, which owns Instagram, declined to comment on Friday.
Earlier this week, entertainer Selena Gomez’s Instagram account was hacked and old photos of ex-boyfriend Justin Bieber were posted to her account.
Always know that hackers can use phone numbers and emails to find out a lot about a person. For example, an attacker could take over a phone by hijacking its SIM card and gain access to accounts associated with the phone number.
Dark Mode in Development for Facebook’s Android App
Want create site? Find Free WordPress Themes and plugins.With Dark Mode being all the rage right now, it’s unsurprising to hear of...
Quit hitting refresh: Twitter is testing a subscribe to tweet replies feature
Want create site? Find Free WordPress Themes and plugins.You’ve been able to ask Twitter to send you a push notification...
Both DxOMark and DisplayMate Love the Galaxy Note 10+
Want create site? Find Free WordPress Themes and plugins.Announced only last week, the Galaxy Note 10 lineup is receiving a ton of...
Google Wants You to Use Fingerprints Instead of Passwords in Chrome
Want create site? Find Free WordPress Themes and plugins.Available today for Pixel devices and coming to all Android devices with...
LG G8X CAD Renders Show a Company With Little Conviction
Want create site? Find Free WordPress Themes and plugins.The successor to this year’s G8 ThinQ is reported to be the G8X, said to...