Instagram, TikTok and Yahoo leaking account data in Hundreds of GB and Millions of Accounts

A massive data breach of popular social media platforms - TikTok, Instagram, and Yahoo is discovered by security researchers on the Dark Web. The breach involved the unauthorized access and leak of large amounts of user information.

• TikTok, has a leaked database of approximately 178GB in size. The leaked data is believed to be in JSON format and originated from tiktok.com. The exact date of the leak is uncertain but multiple threat actors are sharing it on different online forums. This actor claimed that the data dated back to 2022, suggesting the possibility of including older records.
• Instagram has leaked over 17 million records in JSON format. The leaked information includes
  • usernames,
  • email addresses,
  • phone numbers,
  • locations, names of Instagram account holders.

Researchers suspect that the Instagram data is likely a scraping effort from multiple open sources.

• Yahoo! data leak specifics are not  disclosed in the reports. However, it has been mentioned that there is evidence of a potential breach of Yahoo! account information.

Apart from the social media platforms, several other institutions were exposed in the data leaks

• Instituto Mexicano de la Juventud (IMJUVE), a Mexican government organization focused on youth, was also targeted. The threat actor claims to have gained unauthorized access to the IMJUVE database and is offering complete access to it for sale. Additionally, they assert that they have access to all the leaked databases, including the social media leaks. The threat actor further claims to possess over 3,000 recordings available for sale.
• Aadmin access to a Spanish-based online store was being sold illegally. The threat actor, claiming to be located in Spain, offers administrative access to the store. The actor even provides the number of orders placed in May (467) and June (364), as well as the price of the admin access ($150).