The Weekly Breach Breakdown: Mapping Out The Problem – Concerns Arise Over New Instagram Map Feature

Summary 

• Earlier this month, Instagram introduced a new feature called Instagram Map. While designed to let friends see each other’s real-time locations, the tool automatically prompts users to share their precise location every time they open the app, even if they are not posting. 
• Privacy experts warn that this kind of always-on tracking can expose sensitive details, like where someone lives, works or goes to school. It may also enable stalking, harassment or unwanted surveillance in personal relationships. 
• Disable your location services for Instagram, limiting location tagging in posts and stories, and removing past posts that reveal patterns about where you spend time. 
• Parents are encouraged to take steps to prevent children from sharing real-time location data tied to their activities or schools. 
• This Instagram map misstep highlights that not all data exposures involve stolen Social Security numbers or credit cards. Sometimes, seemingly harmless details like location check-ins can be just as dangerous in the wrong hands. 
• If you believe you are the victim of an identity crime, call or text the Identity Theft Resource Center toll-free at 888.400.5530 or live chat on our website, www.idtheftcenter.org. 

Full Transcript 

Welcome to the Identity Theft Resource Center’s (ITRC) Weekly Breach Breakdown for August 22, 2025. I’m Timothy Walden. Thanks to SentiLink for their support of the ITRC and this podcast. Each week, we break down the latest data security incidents making headlines. Today, we’re focusing on a recent incident involving Instagram that exposed sensitive information for millions of users through a little-known feature called Instagram Map.  

Earlier this month, Instagram rolled out a new feature called Instagram Map. The idea sounds harmless enough: a way to see your friends’ real-time locations, similar to Snapchat’s Snap Map or Apple’s Find My. However, here’s the issue: Instagram Map prompts you to share your precise location every time you open the app, even if you’re not posting.  

That’s a major shift from the way most of us think about Instagram: where you decide what to share and when. Instead, this is an always-on, background form of sharing.  

Privacy experts warn that this kind of location sharing can be risky, especially for teens and young adults. It can reveal sensitive patterns, such as where you live, work or attend school. It can also create unhealthy dynamics in relationships if partners or friends use it for surveillance. In some cases, the Instagram map can even put people in physical danger.  

So, what can you do about the Instagram map?  

• Turn off location services: Go to your phone’s privacy settings and disable location access for Instagram or set it to “While Using the App” only. 
• Check Instagram settings: Within the app, avoid tagging your exact location in posts or stories. If you do, wait until after you’ve left that location before posting. 
• Review past posts: Consider removing location tags from older posts that could reveal patterns about your home, work or travel habits. 
• Parents, be cautious with children’s activity: Never post real-time location data tied to your children’s schools, activities, or frequent hangouts and teach them to do the same.   

Meta is urging users to review their privacy settings and limit location sharing. The ITRC also recommends staying alert for suspicious activity both online and offline. If you receive unexpected friend requests, phishing messages or see unusual logins, update your password and review your account security immediately. 

Your personal information is valuable, including your location at any given time. Before you decide to share it, consider who might see it and what they could do with it.  

Data exposures don’t always involve stolen Social Security numbers or credit card data. Sometimes, it’s seemingly harmless details like sharing your location through the Instagram map that pose the biggest risks. The lesson here is to remain mindful of what you share, where you share it and how often. 

If you have questions about protecting your personal information or about the new Instagram map misstep, the ITRC is here to help. You can speak with an expert advisor by phone or text, live chat on our website, or send us an email during regular business hours (6 a.m. to 5 p.m. PT). Just visit www.idtheftcenter.org to get started. 

Thanks again to SentiLink for their support of the ITRC and this podcast. Please like this episode and subscribe wherever you listen to your podcasts. Next week, be sure to catch our sister podcast, the Fraudian Slip. Head of Public Sector at Socure (and an ITRC Board member), Jordan Burris, will be our guest discussing job scams – one in particular that impacted Socure. We’ll be back in two weeks with another edition of the Weekly Breach Breakdown. I’m Tim Walden. Until then, thanks for listening.