This looks like an employee acting on her own, thinking (wrongly) that the account was not active and nobody would notice if she took over the username. Still,

This looks like an employee acting on her own, thinking (wrongly) that the account was not active and nobody would notice if she took over the username. Still, it's a disturbing issue that shouldn't have been allowed to happen, so if this is the case I hope the employee gets some penalty. And the fact that this was possible, or maybe even legal (I don't know Instagram's terms of service), doesn't make it less of a dick move. I was an employee for a local social network with about ~10mil registered users (~5mil daily users). It was much smaller than Instagram, but despite that (or precisely because of that) things like this were completely forbidden.