⚠️ DISCLAIMER: Ministry of Cyber Affairs is an independent news, guides and directory service on cybercrime and cybersecurity, for victims and investigators. It is NOT an official government or ministry portal.
Website Scam CheckerNew
Back to News

Instagram hack reports in India jump fourfold to 16,621 in July

26 September 2026
Source:Meta India Transparency Reports
Share
Instagram hack reports in India jump fourfold to 16,621 in July

A statutory filing Meta must publish in India shows account-takeover complaints on Instagram rising from about 4,200 a month to 16,621 in July. The company says every ticket was answered. It does not say how many accounts came back.

New Delhi: Meta’s India compliance reports show users filed 16,621 “account has been hacked” complaints on Instagram in July 2026, up from 4,197 in June and 4,652 in May. That is about 536 reports a day, against roughly 140 in June.

The numbers come from monthly disclosures required under India’s IT Rules, 2021. They count complaints through the official grievance channel. For a global audience, they are still one of the few public windows into how often users tell Meta they have lost an Instagram account.

Complaint

May

June

July

Account has been hacked

4,652

4,197

16,621

Lost access to a page or group

3,532

3,379

6,673

Fake profile pretending to be me

1,374

1,162

1,324

All Instagram grievances

144,747

134,172

115,908

Hacked-account complaints rose from about 3 percent of Instagram grievances to about 14 percent. Lost page-or-group access nearly doubled. Fake-profile reports did not move. Among named categories, account hacking was Instagram’s largest bucket in July.

Meta says it responded to 100 percent of reports. For hacked accounts, that mostly meant a self-service tool: 15,425 of the 16,621 July cases. The filings do not say how many accounts were actually compromised, restored, or still in an attacker’s hands.

One caveat is Meta’s. Each report says a technical issue means category counts may not be exact, and July’s listed categories fall 215 short of the stated total. That gap cannot explain a jump of about 12,400.

Why the channel matters anyway

India is amongst the handful of countries in the world which requires significant social media intermediaries to publish this monthly account. The point of Rule 4(1)(d) was to make grievance handling visible, not to let a 100 percent response rate stand in for an outcome. On the metric Meta does publish, July is the month access complaints stopped being a side category on Instagram and became a primary one. Every country must have such a law which mandates intermediaries to publish the records / data.

The number needs a caveat, and the caveat is Meta’s

Each of these reports carries the same footnote. Meta says the total number of grievances is accurate, but a technical issue is preventing it from confirming that the number attributed to each surface is accurate. A second footnote says it cannot generate the “content I appear in” metric, again because of a technical issue. Both notes are still open in the August publication.

The public record now shows 16,621 July hack claims, 15,425 routed into recovery tools, and no restoration rate. For creators and businesses that run on Instagram, that missing number is the story.

More in Laws and Policies

Related articles

Laws and Policies (India)

Supreme Court Seeks Cyber Fraud Compensation Where Financial Institutions Fail Due Diligence

In an order dated 29 October 2026, the Supreme Court said proposed RBI safeguards must provide compensation of at least the amount lost by digital arrest and other cyber fraud victims where a financial institution's due diligence failure is established. The court also sought investigation updates from states and Union Territories and prevention proposals from WhatsApp and other intermediaries.

7 Nov 2026
Laws and Policies (European Union)

TikTok’s ‘For You’ Feed Risks Mental Health, EU Says in Preliminary DSA Findings

The European Commission has preliminarily found that TikTok's 'For You' feed breaches the Digital Services Act. It says the recommender system creates 'rabbit holes' of repeated content about sadness, isolation or body image, and that TikTok's mitigation measures are not effective. The finding is not a final decision. TikTok can reply, and a confirmed breach could lead to a fine of up to 6% of worldwide annual turnover.

7 Nov 2026
Laws and Policies (India)

Arattai Rolls Out SIM Binding Under India's Telecom Cyber Security Rules: Why the World Should Follow

Arattai, the Zoho messaging app, has begun binding accounts registered with Indian (+91) numbers to the active SIM on the user's primary device, under the Department of Telecommunications' SIM binding directions. Verification becomes mandatory for all signed-in +91 users on 30 November 2026. Tying a chat account to a live SIM closes a gap scammers exploit worldwide, and other countries and platforms should make it standard practice.

20 Oct 2026