An Instagram password leak that has exposed about 10,000 scraped user accounts stems from a popular “bot” app used to automatically grow a following on the platform. The app SocialCaptain stored Instagram usernames and passwords in plaintext, visible by viewing the source code of the app’s profile page.
Source: CPO Magazine