Instacart
Data Breach on October 06, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | instacart.com | ||
| Claimed By | ScatteredLAPSUSHunters | ||
| Date Discovered | Oct 06, 2025 | ||
| Description | Instacart is a grocery delivery and retail technology company based in the USA (California), connecting consumers with retailers for online ordering, pickup & delivery services. | ||
| Leak Size | 32GB |
Credential Exposure for instacart.com
We've indexed 265 @instacart.com accounts from external breaches, plus 15,215 credentials for instacart.com itself.
Last checked Oct 11, 2026
| @instacart.com addresses from external breaches | |
|---|---|
| Third-party breaches | 179 accounts · across 54 breaches · 165 with a plaintext password · most recent Oct 6, 2026 |
| Combo lists | 67 accounts · most recent Sep 24, 2026 |
| Phishing pages | 28 accounts · most recent Aug 12, 2026 |
| Passwords for instacart.com accounts | |
|---|---|
| Combo lists | 9,661 logins · most recent Oct 10, 2026 |
| Infostealer logs | 5,819 logins · 4,119 infected devices · most recent Oct 10, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Instacart was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.