Exposed in this breach? Do this now
Change the password
On the breached site and everywhere else you reused it. Make every password unique.
Enable 2FA
A second factor keeps a leaked password from becoming a hijacked account.
Set up monitoring
and get notified the moment your data appears in a new leak.
Instagram.com breach: questions and answers
When did the Instagram.com data breach happen?
The Instagram.com breach dates to January 2026.
How many records were leaked in the Instagram.com breach?
LeakCheck has indexed 6,185,774 records from the Instagram.com breach.
What data was exposed in the Instagram.com breach?
The leaked records include email addresses, usernames, names, phone numbers and physical addresses.
Were passwords exposed in the Instagram.com breach?
No. The records indexed from Instagram.com do not include passwords — but the other details they hold can still be used for phishing.
Is the Instagram.com breach verified?
Not fully. The origin of this dataset has not been confirmed, so LeakCheck lists it with an “unverified” flag.
How do I check if my data was in the Instagram.com breach?
Enter your email address, username or phone number in the search form on this page. The free check shows whether your data appears in the Instagram.com breach — and in any of the other 1,469 sources LeakCheck indexes.
What should I do if my data was in the Instagram.com breach?
Change the password you used on Instagram.com and everywhere you reused it, turn on two-factor authentication, and watch for phishing that quotes details from the leak. To hear about the next breach first, set up breach monitoring.