A friend's instagram account apparently got hacked, and their username, email and password changed.

Has anyone experienced this before? According to Instagram, the old email account should have received an email about that name/email change, which didn't seem to happen.

I can't make sense of how they managed to hack that account. Any pointers appreciated!

[Thanks for Boosting]


No idea how it got hacked, the email account seems fine and no spurious activity to detect otherwise. The Instagram password wasn't super-strong, but it still seems odd to assume a bruteforce password attack.

The hacker eventually posted a bit of spam in Russian and seems to then have deleted the account entirely - unless Instagram did, but obviously we didn't get notified of that anymore.

Sign in to participate in the conversation

Fosstodon is an English speaking Mastodon instance that is open to anyone who is interested in technology; particularly free & open source software.