What you need to know
- The flaw made Instagram users contact info available through the source code on the website.
- It was first reported in February and patched by March, but evidence shows it had been present since at least last October.
- The info could have been easily used to create a database and it is possible it already was by an Indian marketing company called Chtrbox.
Bad news for users of Instagram, as apparently the site has been leaking the phone numbers and email addresses of its users for the last few months.
Back in February, data scientist David Stier notified Instagram when he discovered the site was showing some user's contact info in the source code. While the information wasn't showing directly on profiles, having it displayed in the source code on the user's page would still make it easy for someone to scrape the info and build a database.
The problem was fixed by March, but by then it may have already been too late. During Stier's investigation, he found that this flaw had been present since at least last October while viewing archived versions of the website. That's more than enough time for this to have been discovered and exploited.
In fact, just recently it was revealed that a database with the contact info for millions of Instagram influencers had been created. The database was eventually traced back to an Indian marketing company called Chtrbox, who had been storing it online unencrypted where anyone could access it.
This very flaw could be responsible for the creation of that database. Chtrbox later pulled the database offline and said it was only accessible for 72 hours.
The new Instagram bug is the latest in security fails when it comes to services owned by Facebook. Just last week it was uncovered that WhatsApp had a flaw allowing spyware to be installed with nothing more than a phone call.
With data thieves always on the lookout to collect more information, lapses in security such as this put us all at risk. After every new leak, it gives hackers more info to compile into databases which can later be used for identity theft.
We may earn a commission for purchases using our links. Learn more.
These are the best apps for your Android device — period
It can be difficult to find the "right" app when surfing the Play Store simply due to the sheer number of options available. Regardless of what type of app you're looking for, there's an app that can help make your life easier.
Want an Oculus Quest 2? Here's where to buy one!
The Oculus Quest 2 represents the future of wireless VR gaming systems. Here's where to buy one, and all the accessories you'll need for it, too!
V4 delivers a great dark fantasy MMO experience
This week, we're taking a look at a fairly recent game called V4. It's a free-to-play MMO, but that doesn't mean it's not a good time.
Spice up your smartphone or tablet with the best icon packs for Android
Being able to customize your device is fantastic as it helps to make your device even more of "your own". With the power of Android, you can use third-party launchers to add custom icon themes and these are just some of our favorites.