Meta AI support chatbot is tricked into handing attackers control of Instagram accounts
Attackers took over Instagram accounts by asking Meta's AI support assistant to link a new email address to a target account, often while using a VPN to appear in the owner's location; the bot sent a verification code to the attacker, enabling a password reset. The exploit coincided with takeovers of high-profile accounts, including one used by Barack Obama's White House, before Meta said the issue was resolved and it was securing impacted accounts.
Meta had rolled out AI support to all Facebook and Instagram accounts in March with the ability to reset passwords and perform account recovery. Victims said they could not reach a human to recover stolen accounts. It is unclear how many accounts were affected.
Disputed. Meta spokesperson Andy Stone said claims that the vulnerability was used to hack into world leaders' accounts were "totally false".
What would have stopped it
Requiring strong ownership verification and human review for account-recovery changes would most likely have prevented the takeovers.
Guardrails
- G1 Least privilege Failed Support bot could change account recovery emails, a highly sensitive action.
- G2 Human confirmation Failed No human review before relinking an account to a new email.
- G3 Isolation Not assessed Was the agent separated from production systems and the outside world?
- G4 Instruction integrity Failed Bot accepted an impostor's request without verifying account ownership.
- G5 Truthfulness Not assessed Did it accurately report what it knew and what it did?
- G6 Limits Not assessed Was there a cap on rate, spend, volume or scale?
- G7 Oversight Failed Victims reported no way to escalate to human support.
- G8 Recovery Partial Meta said it fixed the issue and was securing impacted accounts.
Sources
-
“Hackers say that they used Meta’s AI support chatbot to break into a host of high-profile Instagram profiles by asking the support bot to change the email address associated with the target account.”
-
“Instagram says it has resolved an issue which saw hackers trick its AI support tool into giving them access to other users' accounts.”
Confidence 67% comes from these sources alone. How we score
History
- 14 Oct 2026Entered in the register with 2 sources