One popular Instagram app has compromised the usernames and passwords of thousands of users in the UK and Canada.