Hackers Used Meta's AI Support Bot to Seize Instagram Accounts

krebsonsecurity.com
June 1, 2026
3 min read
44/100
Summary
Hackers exploited Meta’s AI support bot to reset passwords and seize Instagram accounts, including those of the Obama White House and the Chief Master Sergeant of the U.S. Space Force. Instructions on how to manipulate the bot circulated on Telegram, allowing users to add email addresses to existing accounts.
Key Takeaways
- Hackers exploited Meta’s AI support bot to reset passwords and seize high-profile Instagram accounts, including those of the Obama White House and the U.S. Space Force.
- The exploit involved using a VPN to simulate the target's location and instructing the AI bot to link the account to a new email address for password reset.
- Meta has implemented an emergency patch to address the vulnerability, but the incident highlights the security risks associated with AI chatbots handling sensitive account recovery tasks.
- Multi-factor authentication (MFA) significantly mitigates the risk of such exploits, as accounts with MFA enabled were not compromised in this attack.
Coverage & discussions
Hacker News · krebsonsecurity.com
Community discussions
Community Sentiment
Concerns
- The use of Meta's AI support bot to exploit account access highlights extreme negligence in security measures, raising concerns about the effectiveness of AI in safeguarding user data.
- This incident underscores a troubling trend where companies prioritize ad sales over robust security, suggesting a lack of accountability in AI-driven systems.
Related Articles

Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot
Jun 6, 2026

The newest Instagram “exploit” is the goofiest I've seen
Jun 1, 2026

Websites are closing their doors to AI agents
Oct 18, 2026

Mark Zuckerberg had a bold plan to replace Meta staff with AI
Aug 26, 2026

Muse Spark 1.1
Jul 9, 2026