 When people say their Facebook was hacked or their Instagram was hacked, typically people are being tricked into sharing their password, and they don't have two-factor authentication enabled. So if you have two-factor authentication enabled, which I'm guessing you didn't on this account...