Virtual Event: Threat Detection and Incident Response Summit - Watch Sessions
Connect with us

Hi, what are you looking for?



Facebook Offers Rewards for Instagram Data Abuse Reports

Facebook expands Instagram bug bounty program

Facebook expands Instagram bug bounty program

Facebook on Monday announced two major Instagram-related updates to its bug bounty programs. The company has added Instagram to its Data Abuse Bounty program and it has launched an invitation-only program for the Checkout feature.

In April 2018, following the Cambridge Analytica scandal, Facebook announced the launch of a bug bounty program focusing on the misuse of private information. The social media giant has been offering between $500 and tens of thousands of dollars for reports of apps that collect and transfer personal data.

This program has now been expanded to include Instagram in an effort to encourage security researchers to report potential cases of abuse. Facebook says reports will be rewarded based on impact and quality.

As for the invite-only program for Checkout, Facebook has reached out to researchers who had previously sent in high quality reports to its bug bounty program.

Checkout is a feature that allows users to buy products directly from Instagram, without leaving the application. When it was announced in March, Checkout was in closed beta for businesses and available only to users in the United States.

Facebook now wants researchers to “stress test” Checkout before the feature is rolled out outside the U.S.

Facebook last year paid out $1.1 million through its bug bounty program, and a total of $7.5 million since the launch of the initiative in 2011.

Advertisement. Scroll to continue reading.

“Since launching our bug bounty program in 2011, we’ve worked with the security researcher community to help us identify and fix potential issues in our products and services. This program is one of the longest-running in the industry and we’ve received thousands of bug bounty reports from researchers around the world,” Dan Gurfinkel, security engineering manager at Facebook, said on Monday.

Related: Facebook Launches Privacy and Data Use Business Hub

Related: Facebook Pays $120,000 in Bounties at BountyCon

Related: Facebook Pays Big Bounty for DoS Flaw in Fizz TLS Library

Written By

Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

SecurityWeek’s Threat Detection and Incident Response Summit brings together security practitioners from around the world to share war stories on breaches, APT attacks and threat intelligence.


Securityweek’s CISO Forum will address issues and challenges that are top of mind for today’s security leaders and what the future looks like as chief defenders of the enterprise.


Expert Insights

Related Content

Application Security

Cycode, a startup that provides solutions for protecting software source code, emerged from stealth mode on Tuesday with $4.6 million in seed funding.


Less than a week after announcing that it would suspended service indefinitely due to a conflict with an (at the time) unnamed security researcher...

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...

Data Protection

The cryptopocalypse is the point at which quantum computing becomes powerful enough to use Shor’s algorithm to crack PKI encryption.

Artificial Intelligence

The CRYSTALS-Kyber public-key encryption and key encapsulation mechanism recommended by NIST for post-quantum cryptography has been broken using AI combined with side channel attacks.

CISO Strategy

SecurityWeek spoke with more than 300 cybersecurity experts to see what is bubbling beneath the surface, and examine how those evolving threats will present...

Management & Strategy

SecurityWeek examines how a layoff-induced influx of experienced professionals into the job seeker market is affecting or might affect, the skills gap and recruitment...

Risk Management

The supply chain threat is directly linked to attack surface management, but the supply chain must be known and understood before it can be...