Instagram data from 14 million profiles found in unsecured database, researcher says

[silversurfer]

Information about more than 14 million Instagram accounts is being kept in an unsecured database that could render users vulnerable to hackers, a security researcher told CyberScoop Friday.

Data including users’ profile names, stored links to profile pictures and their Instagram ID is available in the database, which researcher Oliver Hough found on the Shodan web scanning service. The database, physically located in the U.K., includes 14,526,602 entries, according to a screenshot Hough tweeted Friday. Entries also have empty fields for home addresses and telephone numbers, he said.

It’s not clear who is logging the information. But Hough suggested a third party could be scraping Instagram and storing public data for analysis later, either for targeted marketing or another purpose. He suggested the information could be combined with unrelated databases of stolen passwords, which hackers could correlate with the usernames leaked here to try to infiltrate victims’ accounts.

Instagram did not respond to multiple requests for comment from CyberScoop.

SOURCE: https://www.cyberscoop.com/instagram-ins...cher-says/