Monday, April 28, 2025
HomeCyber Security News17 Million Instagram Accounts, 178 GB of TikTok and Yahoo Databases were...

17 Million Instagram Accounts, 178 GB of TikTok and Yahoo Databases were Leaked

Published on

SIEM as a Service

Follow Us on Google News

A Major Data Leak of information affects well-known social media sites, including TikTok, Instagram, and Yahoo.

The alleged data leak included a 178GB TikTok database, over 17 million records on Instagram accounts, and a database leak for Yahoo! accounts.

SOCRadar Dark Web Team has discovered significant database breaches in social media networks.

- Advertisement - Google News

Additionally, they detected unauthorized admin access to a Spanish online store and the Mexican Youth Institute (IMJUVE) database being offered for sale.

Specifics of the Significant Data Leak

Reports say the data that was leaked from the TikTok database is purportedly in JSON format and came from tiktok.com. Although the leak’s exact date is uncertain, 178GB of data are said to have been exposed.

Data of TikTok are Leaked (Source: SOCRadar)

During the same week, another threat actor allegedly leaked identical information on a different forum.

This threat actor stated that the data dates back to 2022, implying that it could include older records.

Over 17 million records in JSON format, including usernames, email addresses, phone numbers, locations, and names, are purportedly included in the Instagram data leak.

Researchers claim that the data’s characteristics suggest that they could have been obtained from open source.

Instagram Database Leak

According to the reports, information on a potential Yahoo! account information breach has been uncovered.

Among other issues, the extent of the breach and the precise information impacted have not been disclosed.

Database of Yahoo! Leak

In addition, attacks are made against IMJUVE, the Instituto Mexicano de la Juventud. The threat actor states that they are offering complete access to the website’s database for sale and that they have access to all the leaked databases.

Furthermore, they claim to have more than 3,000 recordings available for sale.

Additionally, it was discovered that admin access was being sold illegally that allegedly belonged to a Spanish-based online store.

With Spain as the location, the threat actor claims to be offering administrative access to the store. 

The threat actor goes on to list the number of orders for May (467) and June (364), respectively. The admin access is priced at $150.

For both people and businesses, data leaking poses a severe security risk. Sensitive information, including emails, texts, social media postings, and more, can become available to persons who shouldn’t have access to it.

Thus, users must take precautions to safeguard their personal information, such as adopting secure passwords and being wary of concerning emails or communications.

“AI-based email security measures Protect your business From Email Threats!” – .

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

SAP NetWeaver 0-Day Flaw Actively Exploited to Deploy Webshells

SAP disclosed a critical zero-day vulnerability, identified as CVE-2025-31324, in its NetWeaver Visual Composer component. This...

Windows 11 25H2 Expected to Launch with Minor Changes

Microsoft is quietly preparing the next update to its flagship operating system, Windows 11 25H2,...

China Claims U.S. Cyberattack Targeted Leading Encryption Company

China has accused U.S. intelligence agencies of carrying out a sophisticated cyberattack against one...

Critical FastCGI Library Flaw Exposes Embedded Devices to Code Execution

A severe vulnerability (CVE-2025-23016) in the FastCGI library-a core component of lightweight web server...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

SAP NetWeaver 0-Day Flaw Actively Exploited to Deploy Webshells

SAP disclosed a critical zero-day vulnerability, identified as CVE-2025-31324, in its NetWeaver Visual Composer component. This...

Windows 11 25H2 Expected to Launch with Minor Changes

Microsoft is quietly preparing the next update to its flagship operating system, Windows 11 25H2,...

China Claims U.S. Cyberattack Targeted Leading Encryption Company

China has accused U.S. intelligence agencies of carrying out a sophisticated cyberattack against one...