
Meta users have issued a warning after hackers were able to access other people’s emails and phone numbers using just their Instagram username. (Picture: Marcin Golba/NurPhoto via Getty Images)
Hackers have been able to obtain Instagram users’ personal details using only someone’s username,cybersecurity experts say.
Days after it was revealed that a loophole allowed attackers to access other people’s Instagram accounts using Meta’s AI chatbot,cybersecurity experts believe they have found another privacy leak.
The newsletter International Cyber Digest has claimed you can use Instagram’s account recovery function to gain authenticated access to sensitive information,including email addresses and phone numbers.
Testing its theory,the tech security newsletter used the method on some celebrity accounts and were able to access the details of Real Madrid footballer Kylian Mbappé,which showed he also has a personal TikTok account.
So does Cristiano Ronaldo’s wife,Georgina Rodríguez,according to the information gathered from International Cyber Digest.
Cyber Digest said on X: ‘Yet another Meta f***-up: its account recovery function allows unauthenticated access to full account PII,including emails and phone numbers,from just a username. We verified the claim and found social media and wine-app accounts belonging to several public figures.’
Meta has been contacted for comment.
Last week,Metro reported that hackers had been tricking Meta’s AI chatbot to change other people’s passwords.
Cybersecurity experts estimated that around 100 high-value accounts were looted,with some being flogged on black market services.
Barack Obama’s now-unused White House Instagram,which has more than 2,400,000 followers,was among those hacked,as was former Meta security engineer,Jane Manchun Wong.
In a post on X she said: ‘Even my Instagram account got hacked.
‘The password got changed without my knowledge and I was getting different password reset attempts throughout yesterday. And I got repeatedly logged out from the IG iOS app. Quite concerning.’
Meta has since said the issue has been resolved.
Get in touch with our news team by emailing us at .
For more stories like this,check our news page.
'When the moon blocks the sun on Wednesday, Britain will lose a chunk of its solar power.'
Aug 11, 2026
A rendering of how the UK’s new stealth fighter will look (Picture: BAE Systems/Cover Images) The first crewed stealth fighter jet built in the UK for 40 years is nearing completion as the cutting-e
Jul 30, 2026
The discovery marked the 'most significant bomb in Ireland in a decade'.
Jul 27, 2026
'With only a few words you can prompt a whole song.'
Jul 23, 2026