[MattBearman]

Considering the desirability of a two letter account name, it seems likely this was a social engineering attack on Instagram support staff. Sadly, humans are often the weakest link.

Hope you manage to get your account back with all the photos intact.

[jmdocherty]

Yeah, I hope it was social engineering (seems a better option than hacking Lastpass :-) ) but not sure how they could have done it given the information that was on the account/unique to the account. Will be interesting to see if Instagram return the account to me.