Abuse of Meta AI support tool leads to takeover of over 20,000 Instagram accounts
Attackers tricked Meta's AI support chatbot into granting them access to other users' Instagram accounts. Meta sent notifications to targeted users and took steps to protect the hacked accounts. The scale of the damage disclosed on June 8, 2026, was more than 20,000 accounts.
Key facts
- Affected organization
- Meta
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Takeover of more than 20,000 Instagram accounts
- Cause / method
- Tricking an AI support chatbot to gain access to other people's accounts
- Location
- Other countries
Timeline
- Instagram account takeovers exploiting Meta's AI support chatbot came to light.
- Instagram sent notifications to targeted users, and Meta took steps to protect affected accounts.
- Meta said more than 20,000 Instagram accounts had been hacked through abuse of the AI tool.
16 related reports
- Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts
- Hackers Simply Asked Meta AI to Give Them Access to High-Profile Instagram Accounts. It Worked
- Hackers hijacked Instagram accounts by tricking Meta AI support chatbot into granting access
- Meta AI chatbot enabled hackers to access others' Instagram accounts
- Instagram is alerting users who were targeted by hackers during AI chatbot attacks
- Instagram accounts continue to be hacked as hackers claim Meta only removed a UI button
- Hackers didn't hack Instagram; they just asked Meta AI
- Meta secures hacked accounts as users claim its AI enabled the hackers
- The AI IPO Race Heats Up, DOGE Whistleblower Sues Elon Musk, and Instagram Gets Hacked
- The Meta hack shows there’s more to AI security than Mythos
- The Meta AI Instagram Hack Wasn’t About Authentication. It Was About Authorization.
- Meta Says 20,000 Instagram Accounts Hacked via AI Tool Abuse
- Meta reveals over 20,000 Instagram accounts hacked and stolen using AI support bot
- More than 20,000 Instagram accounts hacked using Meta AI bug
- Over 20,000 Instagram accounts stolen in Meta AI support hack
- Over 20,000 Instagram accounts hacked through Meta's AI chatbot bug: Here's what went wrong
Other incidents at Meta
Meta GitHub Breach Exposes Code and Personal Data of 1,500 People
1.5KImpact: Code and personal data of 1,500 people
Meta said hackers stole code and the personal data of 1,500 people through a breach of GitHub. The date of the incident, the specific intrusion method and the follow-up response measures have not been confirmed.
Read on SecurityWeek ↗Meta halts employee-tracking AI training after internal data leak
An internal data leak occurred at Meta. Meta subsequently suspended an AI training program that tracked employees' keystrokes.
Related reports: 2 →Meta halts collaboration with Mercor after data breach
↳ Knock-on damage from the Mercor incident · View original incidentA data breach at Mercor put AI industry secrets at risk. Meta temporarily suspended its collaboration with Mercor following the incident. Whether any Meta information was specifically leaked and the scale of the damage have not been confirmed.
Read on WIRED ↗Meta AI agent's instructions expose sensitive data to employees
Impact: Large amount of sensitive information
At Meta, a large amount of sensitive information was exposed to employees as a result of an AI agent's instructions. The specific types of information, the extent of the damage, the date of the incident, and the response have not been confirmed.
Read on The Guardian ↗Meta sued over alleged personal data leak from AI smart glasses
Meta has been sued over an alleged personal data leak involving its AI smart glasses. Whether a leak actually occurred, the scale of the damage, the date and Meta's response have not been confirmed.
Read on Vietnam.vn ↗Meta wins class action over Facebook account hacks
A class action lawsuit was filed against Meta over Facebook account hacks. Meta won the lawsuit, and the dates and scale of the account hacks have not been confirmed.
Read on Bloomberg Law News ↗Instagram password reset email controversy and leak allegations
Concerns grew as users received password reset emails amid allegations that data from 17.5 million Instagram accounts had been leaked. Instagram denied any data breach and fixed a password reset vulnerability.
Related reports: 7 · last report →WhatsApp vulnerability exposes data of 3.5 billion users
3.5BImpact: Data of 3.5 billion users
A WhatsApp vulnerability exposed the data of 3.5 billion Meta users. The specific data exposed, when the incident occurred and Meta's response have not been confirmed.
Related reports: 2 · last report →Hacker claims leak of 1.2 billion Facebook user records
1.2BImpact: Claimed leak of 1.2 billion user records
A hacker claimed that 1.2 billion Facebook user records had been leaked. Whether a leak actually occurred, the results of any verification of its scale and the company's response have not been confirmed.
Read on Cybernews ↗Zero compensation for 3.3 million victims of Meta data leak
3.3MImpact: Personal data of 3.3 million people
A Meta personal data leak affected 3.3 million people, but compensation amounted to zero. Calls were made to expand the scope of the class action system to provide relief for victims.
Read on 국민일보 ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.