Instacart
Data Breach on October 06, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | instacart.com | ||
| Claimed By | ScatteredLAPSUSHunters | ||
| Date Discovered | Oct 06, 2025 | ||
| Description | Instacart is a grocery delivery and retail technology company based in the USA (California), connecting consumers with retailers for online ordering, pickup & delivery services. | ||
| Leak Size | 32GB |
Credential Exposure for instacart.com
We've indexed 264 @instacart.com accounts from external breaches, plus 15,094 credentials for instacart.com itself.
Last checked Oct 4, 2026
| @instacart.com addresses from external breaches | |
|---|---|
| Third-party breaches | 178 accounts · across 53 breaches · 165 with a plaintext password · most recent Dec 18, 2025 |
| Combo lists | 67 accounts · most recent Sep 24, 2026 |
| Phishing pages | 28 accounts · most recent Aug 12, 2026 |
| Passwords for instacart.com accounts | |
|---|---|
| Combo lists | 9,560 logins · most recent Oct 4, 2026 |
| Infostealer logs | 5,799 logins · 4,111 infected devices · most recent Oct 1, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Instacart was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.