🚨 An underground forum user is advertising a claimed Instagram-related dataset allegedly containing tens of millions of user records.
According to the listing, the actor claims the dataset includes:
• usernames
• phone numbers
• email addresses
• account IDs
• location/address information
• account names
The post references:
• “130 million” records in the title
• additional mentions of millions of database entries
• sample user information screenshots
At this time:
• there is no evidence of a direct Instagram platform breach
• the authenticity and freshness of the dataset remain unverified
• the origin of the alleged data is currently unknown
Large Instagram-related datasets commonly originate from:
• scraping operations
• credential stuffing collections
• third-party application abuse
• exposed marketing databases
• OSINT aggregation
• previously leaked datasets repackaged and resold
Potential risks associated with datasets like this include:
• phishing attacks
• account takeover attempts
• SIM-swapping
• impersonation campaigns
• spam and scam operations
• influencer targeting
• credential reuse attacks
Threat actors frequently leverage social media datasets for:
• social engineering
• identity enrichment
• cryptocurrency scams
• romance fraud
• business impersonation
• advertising abuse
• underground profiling
Users should consider:
• enabling MFA
• removing unnecessary public profile information
• reviewing linked third-party apps
• using unique passwords
• monitoring suspicious login alerts
• restricting public contact visibility where possible
Organizations and brands should monitor for:
• impersonation accounts
• phishing infrastructure
• fraudulent outreach campaigns
• leaked employee social media information
• credential reuse attempts
DDW is continuing to monitor for:
• additional proof samples
• redistribution activity
• actor credibility
• cross-platform correlation
• evidence of active exploitation
#Instagram #DataLeak #CyberSecurity #ThreatIntelligence #Privacy #Infosec #SocialMedia #CyberCrime #DDW #Intelligence
‼️🇦🇪 SIVVI Allegedly Breached: Approximately 300,000 Customer Records Reposted From the Dubai-Based Fashion E-Commerce Platform
https://t.co/XyeakRT1bw