Instacart
Data Breach on October 06, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | instacart.com | ||
| Threat Actor | ScatteredLAPSUSHunters | ||
| Date Discovered | Oct 06, 2025 | ||
| Description | Instacart is a grocery delivery and retail technology company based in the USA (California), connecting consumers with retailers for online ordering, pickup & delivery services. | ||
| Leak Size | 32GB |
Credential Exposure for instacart.com
We've indexed 260 @instacart.com accounts from external breaches, plus 12,906 credentials for instacart.com itself.
Last checked Aug 16, 2026
| @instacart.com addresses from external breaches | |
|---|---|
| Third-party breaches | 178 accounts · across 53 breaches · 165 with a plaintext password · most recent Dec 18, 2025 |
| Combo lists | 63 accounts · most recent Aug 15, 2026 |
| Phishing pages | 28 accounts · most recent Aug 12, 2026 |
| Passwords for instacart.com accounts | |
|---|---|
| Combo lists | 8,044 logins · most recent Aug 15, 2026 |
| Infostealer logs | 5,090 logins · 3,856 infected devices · most recent Aug 8, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
Instacart was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.