Breach Intelligence Report 21 Sep 2026

ig3_dump: Largest of Three Instagram Combolists Leaks 42,054

HEROIC
HEROIC Threat Intelligence Team
Email Addresses Plaintext Password Urls
Combolist ig3_dump_012017224504 uploaded by a Telegram User
Your email may be in this breach. Check in 5 seconds — free, no signup required.
Scan Email →
Records Exposed 42,054
Source Type Combolist
Origin United States
Password Type plaintext

Could your Instagram password still be sitting in a file from 2020? HEROIC analysts logged a combolist labeled ig3_dump on Telegram, dated 31 Aug 2020, holding 42,054 email and plaintext password pairs tied to Instagram-style logins. It is one of three related dumps analysts found from the same upload batch, and this one is the largest of the set.


Why This Question Is Worth Asking

A password that worked on Instagram in 2020 and was never changed still works today. Attackers do not care how old a combolist is, only whether the pair still opens something, which means a file like this can quietly stay dangerous for years after it first leaked.


What This ig3 Dump Contains

  • Email addresses identify each account and become the target for phishing built around them.
  • Plaintext passwords are ready to use immediately, with no cracking required.
  • URLs confirm which login page each credential pair was captured from.

Why This Dump Stands Out From Its Siblings

Analysts also found two related files from the same upload window, one much smaller and one mixed in scope, but ig3 carries the largest single share of the credentials among them. Being the largest slice means more people are affected by this particular file than by the smaller ones in the same batch.


How a Dump Like This Gets Labeled and Split

Uploaders often break a large batch of stolen credentials into smaller numbered files, tagging each with the service they are believed to unlock and a timestamp from when the batch was processed. Splitting the file this way makes it easier to trade in pieces, not evidence that Instagram itself was breached.


Is Your Instagram Login One of the 42,054?

Scan your email to check whether it shows up in this dump or any other HEROIC has indexed. If it does, change that password on Instagram and everywhere else you reused it, then enable two factor authentication for extra protection. Check your work email too, since the habit of reusing a password rarely stays confined to personal accounts.

Breach Breakdown

Domain ig3_dump_012017224504 uploaded by a Telegram User
Leaked Data Email Addresses,Plaintext Password,URLs
Password Types plaintext
Date Leaked 21 Sep 2026
Check in 5 seconds

42,054 passwords exposed. Is yours one of them?

Enter your email to scan this breach plus 400B+ other leaked records. If you're compromised, we'll show you exactly where and what to change.

All information submitted is Private and Secure. We do not sell or share email addresses. By searching, you agree to HEROIC's Privacy Policy and Terms of Service.

Free forever · No account required · Results in seconds

Private & Secure No Account Needed 3,037 scanned today
Breach Rank #N/A by affected users
Impact Score
2
sensitivity + scale + recency
Est. Financial Impact $304.3K fraud, phishing & misuse risk
Scan your email Free →

Your Breach Details

Date:
Severity:
Records Exposed:

Your Exposed Information

Your Risk Level

How This Affects You

Full Breach Details

Premium Insights

Unlock Critical Security Information

Create a free account to access:

  • Full Breach Impact Analysis
  • Identity Theft Risk Score
  • Exposed Credentials Details
  • Personalized Security Recommendations
Create Free Account

Identity Theft Risk Score

Risk Score: 8.7/10 - Critical

Data Exposure Analysis

Passwords Critical
Financial High
Personal Medium
Social High
Security Critical

Breach Timeline Analysis

March 2024 Multiple credentials exposed in recent data breach
January 2024 Password found in dark web marketplace
December 2023 Personal information leaked in major security incident

Security Recommendations

High Priority
Password Security

Critical: Change compromised passwords immediately and enable 2FA on all accounts

Important
Financial Protection

Monitor credit reports and set up fraud alerts with major credit bureaus

Recommended
Identity Protection

Enable advanced identity monitoring and dark web surveillance