A independent security researcher, photos and messages deleted over a year ago where not deleted from Instagram server due to a bug.
As per an independent security researcher Saugat Pokharel, Instagram stored year old deleted photos and messages on its server. Moreover, the data could be easily recovered using the in-app download tool. This is something that we as a user of this platform would never expect from Instagram. Besides, this is an invasion of privacy as the data deleted over a year ago still can be accessed easily from the server. This Instagram server bug was found by Saugat in a $6000 bug bounty program last year in October. Notably, Saugat found out about this breach when he downloaded his Instagram data using the in-app feature. The downloaded Instagram data contained all the images and direct messages which were deleted over a year ago.