Update: After many emails, in app reports and stress, I have now been un-hacked, have taken back control of my account and am happy about it! This has been a huge cyber security wake up call.
2 step verification for everything from now on. My Instagram account is cosy, it's only 4000+ followers so I am super fortunate. Browsing Google I can see that hundreds of users with many more followers than me did not get the happy ending to their hacking saga that I did.
My Instagram account has been hacked!
It shouldn't have happened to me. I do all my own blogging and Instagram-ing, so it's not like my password is compromised, stored anywhere or easy to crack. My mistake is that I didn't have 2 step verification activated. If I did, this couldn't have happened. Please, if you're reading this, go and update your Instagram password. I would hate for anything like this to happen to you.
This morning, I received an email from Instagram advising me that my Instagram password had been changed. This worried me immediately as I knew I hadn't changed it. This is the email:
So I immediately clicked the link to 'reset my password here'. When I got on the Instagram platform it was obvious that whoever hacked my account had also deleted my email and my username. So technically, my hacked account didn't even exist. This loophole meant that I couldn't take back control of my account. It also makes the email above completely useless. Because if you have changed your password, you wouldn't need to reset your password and if someone has hacked you, you CAN'T change your password anyhow. So what's the point? This email link doesn't give you any special overriding powers at all.
I tried to log into my hackers username account, thaddeu_waltons2p, hoping that this email generated link would work just the once to seize back my account, but that was wishful thinking.
After 45 minutes of reading everything on the help and support section of Instagram, I filed a complaint that this hacker was impersonating me. Because he is. He hacked my account and changed my user name to his own and deleted my email. But my images are still there as is my name, image and details. As part of my report I had to take a photo of myself holding up an ID and send this to Instagram too. I was anxious but hopeful. Then this afternoon, I got this reply from Instagram:
Thanks for contacting us. It looks like you're having a
problem logging in. To get help with login issues or learn about what you can
do if you think that your account has been compromised, visit the Help Center: http://help.instagram.com/374546259294234/?ref=cr
So, it looks like someone devoted exactly 3 seconds to my filed impersonation complaint before binning it. I'd already read everything over in the help centre concerning 'compromised' accounts and they all advised the account user to LOGIN to their account and update the password. Something I can't do.
So,
thaddeu_waltons2p hacked my account and is now impersonating me and I can't do anything about it. I tried to secure my original username "esther.aliu" and breathed a big sigh of relief that it's available. This is good news. The bad news is that this new "esther.aliu" account is empty. I've lost all my posts. I've lost all the wonderful and tangled connections I made over the years. I don't want to let my old account go. And I certainly don't want anyone to impersonate me. I'm just so annoyed.
And Instagram? After making me file a complaint, upload a picture of myself holding up ID and explaining everything in detail.. they just think I'm having 'trouble logging in.'