An exploited bug in Instagram’s application programming interface allowed hackers to steal personal information from high-profile user accounts, the company said Wednesday.
“We recently discovered that one or more individuals obtained unlawful access to a number of high-profile Instagram users’ contact information — specifically email address and phone number — by exploiting a bug in an Instagram API,” a spokesperson for Instagram said in a statement to TIME.
A glitch in Instagram’s API made it possible for a person to get a set of code that potentially contained email addresses and phone numbers for Instagram accounts. At least one individual who found the bug used it to access information for some accounts.
According to Instagram, no account passwords were exposed and the company has fixed the bug. The Facebook-owned company said it believes the hack was targeting high-profile users, and has informed verified members of the service.
“As always, we encourage people to be vigilant about the security of their account and exercise caution if they encounter any suspicious activity such as unrecognized incoming calls, texts and emails,” the spokesperson said.
- Bad Bunny's Next Move
- 'How Is This Still Happening?' A Survivor Questions America's Gun Violence Problem
- Nicole Chung: The Person I Became After My Father's Death
- Can Birth Control Help Solve the World's Rat Problem?
- About That Devastating Tom-Shiv Scene in Succession's Premiere
- Why Humza Yousaf's Win Is 'Historic' for Scotland
- If Donald Trump Is Indicted, Here's What Would Happen Next in the Process
- It's Time to Say a Loving Goodbye to John Wick
- Who Should Be on the 2023 TIME100? Vote Now
- Column: Ozempic Exposed the Cracks in the Body Positivity Movement