66,486 Passwords From the 80K_instagram_CIPHER1987 Dump Hit Dark Web

HEROIC analysts identified a combolist named "80K_instagram_CIPHER1987" that a Telegram user uploaded on August 6, 2026. Despite the "80K" in its name, the file actually contains 66,486 records pairing email addresses with plaintext passwords and associated URLs, and its naming suggests the credentials are tied to Instagram accounts, primarily in the United States.

Why the 80K_instagram_CIPHER1987 Dump Is Dangerous

Each of the 66,486 records in this file includes a working email address, its exact password in plain text, and the URL where the login was captured. An attacker does not need to break any encryption. They can take a line from this file and attempt to log directly into the Instagram account it points to, and from there, into anything else linked to that account.

What Was Exposed in This Combolist

• Email addresses
• Plaintext passwords
• URLs linked to each account

Why This Matters

A compromised social media account can be used to impersonate the owner, message their contacts, or reset passwords on other services tied to that email. If any of these 66,486 people reused their Instagram password on email, banking, or shopping accounts, attackers can attempt credential stuffing to break into those too, opening the door to identity theft and financial fraud.

How a Combolist Like This Gets Built

A combolist pairs stolen usernames or emails with matching passwords, typically gathered from phishing pages, malware infections, or earlier breaches before being merged into a single file. Social media logins like Instagram are frequent combolist targets because accounts are valuable to resell or use for further scams. Files like this one are usually distributed for free or sold on Telegram channels shortly after being compiled.

Check If You Are Affected

If you have an Instagram account or any other online account, it is worth checking whether your email address appears in this leak or any other. HEROIC's free breach scanner checks your information against a database of more than 400 billion breached records, giving you a clear answer in seconds.