Instagram data breach
The Instagram breach happened on January 7, 2026 and exposed 6,215,150 accounts. 5 kinds of data were exposed.
Overview
- Site
- instagram.com
- Breach date
- January 7, 2026
- Recorded on
- January 11, 2026
- Accounts exposed
- 6,215,150
- Exposed data
- Display names, Email addresses, Geographic locations, Phone numbers, Usernames
- Risk score
- 32 out of 100
Risk based on the exposed data
This breach scores 32 out of 100. The score is driven mostly by Phone numbers, Email addresses, Geographic locations.
The risk score is a guide to how dangerous a breach is, judged by the kinds of data exposed. The number of accounts is not included.
Breaches from the same period
- Panera Bread (2026-01-07, 5,112,502 accounts)
- Betterment (2026-01-09, 1,435,174 accounts)
- CarMax (2026-01-24, 431,371 accounts)
What affected users should do
- Passwords were not exposed, but you may receive fake emails aimed at the exposed email addresses.
- Turn on two-factor authentication for your login.
- Phone numbers were exposed, so watch out for impersonation by text message or phone call.
This site organizes publicly available information about data breaches. Data as of February 20, 2026. Breach dates are as originally listed; when only the month is known, the date is recorded as the 1st.