New York (The Verge) — Instagram kept deleted photos and messages on its servers for more than a year theverge.com/2020/8/14/2136….
A security researcher found that Instagram was keeping copies of photos and direct messages he’d deleted from his account for more than a year. The researcher discovered and reported the problem last October, and Instagram now says it’s fixed the bug as of this month.
Instagram says this was due to a bug in its system that it’s now fixed, and Pokharel has been rewarded a $6,000 bug bounty for highlighting the problem. As reported by TechCrunch, Pokharel discovered the bug in October last year and says it was fixed earlier this month.
“The researcher reported an issue where someone’s deleted Instagram images and messages would be included in a copy of their information if they used our Download Your Information tool on Instagram,” a spokesperson for Instagram told TechCrunch. “We’ve fixed the issue and have seen no evidence of abuse. We thank the researcher for reporting this issue to us.”
It’s not clear how widespread this issue was and whether it affected all Instagram users or only a subset of them, but it’s certainly not an uncommon problem. Whenever we delete data from online services there is usually a lag of some unspecified time before the data is fully removed from the site’s servers. For Instagram, the company says it usually takes around 90 days to completely remove data. But security researchers have found similar issues with other services in the past, including Twitter, which retained direct messages between users for years after they were supposedly deleted. — James Vincent/@verge