What was exposed, when it happened, and which databases confirm it.
- accounts
- 17,015,593
- Breached
- January 7, 2026
- Last Update
- January 11, 2026
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
What happened
In January 2026, data allegedly scraped via an Instagram API was posted to a popular hacking forum. The dataset contained 17M rows of public Instagram information, including usernames, display names, account IDs, and in some cases, geolocation data. Of these records, 6.2M included an associated email address, and some also contained a phone number. The scraped data appears to be unrelated to password reset requests initiated on the platform, despite coinciding in timeframe. There is no evidence that passwords or other sensitive data were compromised.
Compromised Info
- Display names
- Email addresses
- Geographic locations
- Phone numbers
- Usernames
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- LeakCheck— linked via automatic string matching
- HIBP
FAQ
What was leaked in the Instagram breach?
The Instagram breach exposed: Display names, Email addresses, Geographic locations, Phone numbers, and Usernames.
When did the Instagram breach happen?
The Instagram breach was disclosed on January 7, 2026 and affected 17,015,593 records.
Am I affected by the Instagram breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the Instagram leak.