Instagram Suffers a Potentially Huge Breach as Hackers Target Celebrity Accounts
Instagram is warning its high-profile users that hackers may have used a buggy API to access their accounts. While there is no confirmation from the company, it is possible that the recent hack of Instagram account of Selena Gomez may have been a result of this bug.
Hackers used a buggy Instagram API to access high-profile accounts
The Facebook owned photo sharing site said in a warning sent out to those with verified accounts that hacker(s) were targeting high-profile users, getting access to their phone and email contact information thanks to a buggy API.
"We recently discovered that one or more individuals obtained unlawful access to a number of high-profile Instagram users’ contact information - specifically email address and phone number - by exploiting a bug in an Instagram API," Instagram wrote in the warning email.
However, it has assured that no passwords were accessed during this exploit and added that the targets were believed to be high-profile users.
"At this point we believe this effort was targeted at high-profile users. We encourage you to be extra vigilant about the security of your account and exercise caution if you encounter any suspicious activity such as unrecognized incoming calls, texts and emails."
Instagram has now fixed the bug and is currently conducting an investigation into the incident. "We fixed the bug swiftly and are running a thorough investigation," it said. "Our main concern is for the safety of our community and, out of an abundance of caution, we are reaching out to all verified accounts."
Earlier this week, hackers took control Gomez's Instagram account. The pop star reportedly has the most-followed account on the site with over 125 million followers. After taking control of her account, hackers shared several private photos of her ex-boyfriend, Justin Bieber. The account was quickly shut down by her team before taking back its control. Instagram hasn't yet said if this "buggy API" is responsible for this particular hack.
The company has apologized to its users for this mess. "Your experience on Instagram is important to us, and we are sorry this happened."
- We have reached out to Instagram for a confirmation and will update this space as we receive any official comment.