By using Instagram for API defects, it turned out that unauthorized access to user's contact information was done

Using a bug in the API used to communicate between Instagram and other applications, at least one or more users had unauthorized access to the popular Instagram user's contact information, especially phone numbers and email address information Was revealed.

Instagram Suffers Data Breach! Hacker Stole Contact Info of High-Profile Users
https://thehackernews.com/2017/08/instagram-breach.html


Instagram hack: Celebrity contact details revealed - BBC News
http://www.bbc.com/news/technology-41104449

Currently there are more than 700 million users in Instagram, but it was said that those who were aimed at were among the most notable users. According to Instagram, in this case it seems that the password of the account is not leaked out, but the hacker who got the phone number and the mail address,Social engineeringIt is thought that there are cases where you got your password by making full use of it and accessing your account.

Although not specifically mentioned, just the other day, popular singerSelena GomezTo the Instagram of the singer, a former lover'sJustin BieberIt is thought that this account hijacking is the reason why the naked picture taken in paparazzi in 2015 was uploaded. After the photo up, Selena · Gomez's Instagram account is closed once and the photo of the problem is recovered with the deleted photo.

Selena Gomez (@selenagomez) • Instagram photos and videos
https://www.instagram.com/selenagomez/


In Instagram, he told the user that contact information would have been stolen so as not to react to suspicious phone calls and e-mails. Also, API bugs have been fixed, and we are currently conducting thorough investigation.