The contact information of Instagram influencers, celebrities and brands have been exposed to the public without a password.
The exposed database keeps growing by the hour, containing over 49 million records at first.
Each record has public data including biographies, profile pictures, phone numbers of the followers they have, if they’re verified and their location by city and country, but also their private contact information, such as the Instagram account owner’s email address and phone number
Security researcher Anurag Sen came across the database and alerted TechCrunch in an effort to find the owner and get the database secured who in turn tracked down the database back to Mumbai-based social media marketing firm Chtrbox. Eventually, Chtrbox pulled the database offline.
“We’re looking into the issue to understand if the data described, including email and phone numbers, was from Instagram or from other sources. We’re also inquiring with Chtrbox to understand where this data came from and how it became publicly available,” Facebook, which owns Instagram, said in a statement.