Instagram retained user deleted photos and private messages for over a year

A bug in the Instagram application let the Facebook-owned photo sharing app retain the photos and private messages of the users on the application’s server even after deletion from the user end. The bug came to light when a security researcher flagged it in October last year. The bug was flagged in one of Instagram’s bug bounty programmes. Upon being informed about one of its servers storing the deleted date, the company not only fixed the bug but also rewarded the security researcher who flagged the bug handsomely. The security researcher was awarded with $6000 which roughly translates to Rs 4.5 lakh.