Instagram, the popular social media has been affected by a harmful bug which is accountable for accessing millions of user accounts and stealing personal information.
Instagram had warned that one or multiple hackers had been found stealing account information, in particular, celebrity accounts, by misusing a bug on Instagram's servers.
The authorities have claimed to fix the bug, but still, the hackers had been stealing account information from verified and non-verified accounts. The hackers then began advertising the data in exchange for cryptocurrencies on the dark web.
They created a searchable database named Doxagram, which has since been shut down where users had to pay $10 to access stolen Instagram profiles. Instagram did not reveal as to how many profiles had been affected, but the hackers had claimed they had information of more than six million users.
RepKnight, a cyber-security firm informed that dozens of celebrity account information still appears to be on the dark web.
Instagram co-founder Mike Krieger said in a statement: "We care deeply about the safety and security of the Instagram community, so we want to let you know that we recently discovered a bug on Instagram that could be used to access some people's email address and phone number even if they were not public. No passwords or other Instagram activity was revealed.
"We quickly fixed the bug, and have been working with law enforcement on the matter. Although we cannot determine which specific accounts may have been impacted, we believe it was a low percentage of Instagram accounts.
"Out of an abundance of caution, we encourage you to be vigilant about the security of your account, and exercise caution if you observe any suspicious activity such as unrecognized incoming calls, texts, or emails.
Additionally, we're encouraging you to report any unusual activity through our reporting tools. You can access those tools by tapping the "..." menu from your profile, selecting "Report a Problem" and then "Spam or Abuse."
"Protecting the community has been important at Instagram from day one, and we're constantly working to make Instagram a safer place. We are very sorry this happened."
The photo-sharing social media confirmed that no passwords were stolen and have advised users to change the email id or phone number linked to their account.