Facebook says more Instagram passwords exposed than thought

Millions more Instagram users were affected by a password security lapse than parent company Facebook acknowledged nearly four weeks ago. The social media giant said in late March that it had inadvertently stored passwords in plain text, making it possible for its thousands of employees to search them. It said the passwords were stored on internal company servers, where no outsiders could access them.

Facebook said in a blog post on Thursday that it now estimates that “millions” of Instagram users were affected by the lapse, instead of the “tens of thousands” it had originally reported.

It had also said in March that the issue affected “hundreds of millions” of Facebook Lite users and millions of Facebook users. Facebook Lite is designed for people with older phones or slow internet connections.