 It's people reusing their passwords. So you may be using the same password for Instagram that you're using for some random website you signed up for a long time ago. That information was leaked out on the web due to a data breach, and now they're trying that information on Instagram. That's one way that hackers get in.