The social network has made some changes in Instagram, which should have covered this gap, although it cannot be confirmed if this is definitive. The big problem is that the data that has been leaked is precisely those that an attacker needs to hack an account on the social network, which is a huge security breach on your part.
Several security experts have not hesitated to react in this situation, such as the Bitglass CTO, which has said the following in this situation: “ There is an important distinction between what a user decides to make public, such as a username or a unique username, and information on Personal identification (IIP) that you use to create accounts. When people create user profiles for a particular service, they trust that their personal data will be kept secure. Instagram He exposed the passwords of the users a little less than a year ago and it seems that the company has not learned enough the lesson. Now you also know that Instagram He has left exposed names, account numbers and telephone numbers. Although there is no indication that credentials have been leaked or that hackers have stolen data, users could have seen their accounts and their information exposed if a specialist outside the company had not encountered the problem and intervened. Companies cannot trust others to find their security problems and, instead, must adopt a more proactive approach to defend user data. Organizations that have complete visibility and control over their data are in a better position to identify and remedy vulnerabilities that could be exploited by malicious actors. The days of reactive safety have passed, real-time protections are now absolutely critical. ”
At the moment we do not know what are the changes that are being introduced in Instagram To protect users. The social network has said that they are working on changes, they have confirmed it to Forbes magazine. One of the big questions in this case is how many users have been exposed to this security problem. But between August and September the user data of the application have been exposed twice. So it is clear that there is work that the company should carry out to improve this aspect.
Several security researchers have shown how this leak can allow access to data of millions of users of Instagram without too many problems, in that same article in Forbes magazine the way in which it has been carried out is shown. This makes it clear that the data of many users in the social network could have been exposed in this way. Although until now it is not known if this has happened.
Since at the moment there is no evidence that such data has been obtained, stolen or could be used for malicious use. But without a doubt the maximum attention is required at the moment. Instagram He has not made any further statements, apart from acknowledging that security breach. So we hope to know sooner, because this story promises to bring tail. What is clear is that Facebook still not having security in order, as we are seeing these months.