Instagram Retained Photos, Private Messages Even After Users Deleted Them

Instagram reportedly fixed the bug earlier this month.

Advertisement
By Tanishka Sodhi | Updated: 14 August 2020 15:34 IST
Highlights
  • Security researcher was rewarded by Instagram for finding the bug
  • Instagram was storing data even after users deleted it
  • Instagram says it removes everything after 90 days of deletion

The bug in Instagram was reported last year, and fixed earlier this month

A security researcher was awarded with $6,000 (roughly Rs. 4.5 lakhs) bug bounty pay after he discovered that Instagram retained photos and private direct messages on its server even after deletion, as per an online report. The researcher reported the bug in October last year through Instagram's bug bounty programme, and it was fixed earlier this month by the Facebook-owned company.

While it is not uncommon for companies to keep freshly deleted data for a while until it can be properly removed from its networks, independent security researcher Saugat Pokharel found that Instagram's servers still had the data that Pokharel had deleted more than a year ago, according to a report by TechCrunch. Instagram says that it takes about 90 days for deleted data to be completely removed from its systems, networks and caches, as per the report.

Advertisement

When Pokharel used ‘Data Download,' Instagram's data download tool, the researcher found photos and private messages with other users that he had previously deleted. He then told the same to Instagram and was awarded $6,000, said the report. A spokesperson for Instagram confirmed the incident in a statement to TechCrunch, saying that the issue had been fixed and that they did not find any evidence of abuse.

Instagram had launched its Data Download tool in 2018 amidst global concerns over whether the privacy of users' information on social media platforms was being compromised. The tool allows users to export their photos, videos, archived stories, profile, comments and more. However, Instagram had reported a few months later that some of its users' passwords had been compromised due to a bug in the Download Your Data tool that was subsequently fixed.

Advertisement

Instagram had also rolled out a feature last year that gives users control over the personal information shared with third-parties through Instagram.


Poco M2 Pro: Did we really need a Redmi Note 9 Pro clone? We discussed this on Orbital, our weekly technology podcast, which you can subscribe to via Apple Podcasts, Google Podcasts, or RSS, download the episode, or just hit the play button below.

Affiliate links may be automatically generated - see our ethics statement for details.
 

Get your daily dose of tech news, reviews, and insights, in under 80 characters on Gadgets 360 Turbo. Connect with fellow tech lovers on our Forum. Follow us on X, Facebook, WhatsApp, Threads and Google News for instant updates. Catch all the action on our YouTube channel.

Advertisement

Related Stories

Popular Mobile Brands
  1. Oppo Find X9 Ultra With 200-Megapixel Periscope Camera Launched Globally
  2. Poco M8s 5G Debuts Globally With 7,000mAh Battery: See Price, Features
  3. Vivo Y6t Launched With 6,500mAh Battery, Snapdragon 4 Gen 2 SoC
  4. GeForce Now Review:  Is Nvidia's High-End Cloud Gaming Service For You?
  5. Oppo Enco Clip 2 With Open-Ear Design, Launched Alongside Oppo Watch X3 Mini
  6. Oppo Find X9s Pro Launched With 200-Megapixel Cameras: See Price, Features
  7. Apple's iOS 27 Update Might Drop Support for These iPhone Models
  8. Redmi K90 Max Debuts With Active Cooling Fan, 8,550mAh Battery: See Price
  9. Xiaomi TV S Mini LED 75 (2026) Review
  10. Vivo X300 FE Roundup: Expected Price in India, Specifications
  1. Spotify Ads Manager Platform Launched in India, Brings Self-Serve Advertising to Businesses
  2. Microsoft Cuts Xbox Game Pass Prices in India, Global Markets; Ends Day-One Call of Duty Access
  3. Incoming Apple CEO John Ternus Already Driving AI Overhaul Ahead of Leadership Transition: Report
  4. NASA Shuts Down Voyager 1 Instrument to Extend Mission Life in Deep Space
  5. Oppo Enco Clip 2 With Open-Ear Design, Up to 40 Hours Total Battery Life Launched Alongside Oppo Watch X3 Mini
  6. Vivo Y6t Launched With 6,500mAh Battery, Snapdragon 4 Gen 2 SoC: Price, Specifications
  7. OCBC Partners Lion Global Investors and DigiFT to Launch Tokenised Gold Fund With GOLDX Token
  8. Oppo Pad 5 Pro Launched With 13,380mAh Battery, Snapdragon 8 Elite Gen 5 SoC Alongside Oppo Pad Mini: Price, Features
  9. Redmi K90 Max Launched With Dimensity 9500 SoC, 8,550mAh Battery and Active Cooling Fan: Price, Specifications
  10. Oppo Find X9 Ultra Launched With Snapdragon 8 Elite Gen 5 SoC, 200-Megapixel Periscope Camera: Price, Specifications
Download Our Apps
Available in Hindi
© Copyright Red Pixels Ventures Limited 2026. All rights reserved.