Advice Request Someone logged into my old instagram account

[ZeePriest]

I got an email today telling me that someone has logged into my old instagram account. This account hasn't been logged into for years and nobody else has my password and I've never really used it. All I have is a couple of friends on it and that's all. The email stated that someone logged in from a Moto G phone in Russia. I immediately took the first step and changed my password, then I requested that my account gets deleted. I'm really shocked by what happened especially that I've forgotten about this account.

 

[Ink]

Security practises encourage that you have protect your accounts. Basic knowledge.

What's two-factor authentication and how does it work on Instagram? | Instagram Help Center

Two-factor authentication is a security feature that helps protect your Instagram account in addition to your password each time someone tries accessing Instagram from a device we don't recognize.

help.instagram.com

 

[ZeePriest]

Security practises encourage that you have protect your accounts. Basic knowledge.

What's two-factor authentication and how does it work on Instagram? | Instagram Help Center

Two-factor authentication is a security feature that helps protect your Instagram account in addition to your password each time someone tries accessing Instagram from a device we don't recognize.

help.instagram.com

I have this on my new instagram and fb accounts and even on my emails...etc. But I totally forgot about this specific instagram account and I thought that I've deleted it years ago. If it weren't for the email that I've got, I wouldn't know that this account still existed. Anyway, I deleted it now but I'm surprised how would someone log into it without knowing my email atleast nor my password...I really don't know! I'm confused.

 

[Ink]

It's possible the data was leaked from using third-party connected apps.

Social media boosting service exposed Instagram passwords

Exclusive: A bug in the service's website exposed thousands of Instagram passwords in plaintext.

techcrunch.com

 

[plat]

Have I Been Pwned: Check if your email address has been exposed in a data breach

Have I Been Pwned allows you to check whether your email address has been exposed in a data breach.

haveibeenpwned.com

There's a "passwords" tab at the top, you can enter that suspect Instagram password and see what comes up.

 

[ZeePriest]

Is it enough that I changed my password? I even set the account for deletion.

 

[Wasar]

Is it enough that I changed my password? I even set the account for deletion.

Yes it is a possible consequence of a data leak. If you can log in, it means that the attacker did not change your password because otherwise you were out of the account. So I think you did very well to change your password by requesting the cancellation of your account.

 

[mkoundo]

In addition, it's worth changing your password on any other account that uses your hacked instagram password.