What you need to know
- A worrying bug was discovered on Instagram's servers.
- Security researcher Saugat Pokharel discovered deleted Instagram photos and messages were kept by Instagram long after he deleted them.
- He found data that had been stored for more than a year.
A security researcher discovered a now-fixed Instagram bug that meant removed photos and messages were kept for more than a year after they were deleted.
As the report notes, it isn't "uncommon" for companies to keep data that has been deleted for a time, whilst it is properly removed from its network. Indeed, Instagram said that its own process takes about 90 days to fully remove deleted data from its system. You can imagine Pokharel's surprise when he found that data he'd supposedly deleted from his Instagram was still available from Instagram's data download tool more than a year after it had been deleted:
According to the report, the bug was reported in October of 2019, and fixed by Instagram last month. In a statement Instagram said:
Given the report, it's unclear how widespread the issue may have been, or how long it had gone on for prior to fixing. It seems there's every possibility other users could have been affected by the problem, and as such, Instagram may have kept user's photos and messages for a lot longer than previously thought.
Be an expert in 5 minutes
Get the latest news from Android Central, your trusted companion in the world of Android