On the 1st of November a friend shared with me a screenshot from the Instagram of a concerned parent explaining a situation in which her child was being cyber bullied, and it was clear from the content of the messages that the bully could her their private conversations.

I guess this bug has been know and abused for at least three months?