A huge database containing contact information for millions of celebrities and business accounts has been found on the Instagram website, a security researcher said.

The database, hosted by Amazon’s AWS cloud storage service, was left open without a password, allowing anyone to access it, said the researcher. He said the database contained more than 49 million records, adding that the number continued to increase.

After tracking the database, TechCrunch found that it belongs to the Mumbai-based social media marketing company Chtrbox, a company that pays influencers to publish content promoted on their accounts.

Two years ago, Instagram announced a security flaw in the developer APK that allowed hackers to obtain e-mail addresses and phone numbers for six million Instagram accounts.

Source : TechCrunch