> The scraping effort comes two years after Instagram admitted a security bug in its developer API allowed hackers to obtain the email addresses and phone numbers of six million Instagram accounts. The hackers later sold the data for bitcoin.
Obtaining data through a security bug is very much different from scraping it from public sources, and not really something you can blame on the people the data is about, as your initial comment did. So lets wait and see if the question where the data comes from gets answered clearly before blaming people for being stupid.