A security incident involving Instagram’s API has exposed data from approximately 17.5 million users through unauthorized scraping of publicly available information. The breach highlights concerns about how “public” data can be collected and misused at scale, even when accessed through legitimate API channels. Security researchers have flagged the incident as a significant privacy concern despite the data’s technical public status.