Hackers likely hijacked over 20,000 Instagram accounts with Meta’s AI chatbot
20,225 Instagram accounts. Hijacked via Meta's own AI chatbot. The exploit: a password-reset bug that bypassed 2FA.
Why it matters
Meta's AI product introduced a critical security vulnerability affecting tens of thousands of users, raising questions about AI safety governance and the risks of deploying AI-driven customer support without rigorous security hardening. This is a real-world case study in AI product risk that should reshape how enterprises approach AI security audits.
The key facts
6 to know20,225 Instagram accounts hijacked via AI chatbot exploit
Attack vector: AI chatbot password reset feature bypassed 2FA verification
Root cause: bug in email verification code path
Meta disclosed via Maine state notice filing
Published June 8, 2026
Spotted by Bleaching Computer
Go to the source
The Verge Techtheverge.com
Publisher excerpt: Hackers likely took over 20,225 Instagram accounts using Meta's AI support chatbot, the company confirmed in a notice filed with the state of Maine. In the notice, spotted earlier by Bleeping Computer, Meta blames a "bug" for the exploit that allowed attackers to hijack accounts without two-factor…