NewsPublished 8 Jun 2026

Over 20,000 Instagram accounts stolen in Meta AI support hack

Source Bleeping Computer

Description

Meta has revealed that 20,225 Instagram users had their accounts hijacked in a recent incident where attackers used Meta's AI-powered support system to reset passwords. [...]

Impact

The vulnerability led to the compromise of over 20,000 Instagram accounts. Attackers gained unauthorized access by resetting passwords without proper verification, affecting users without two-factor authentication enabled. Potentially exposed data includes contact information (email, phone), dates of birth, social media posts, direct messages, account activity, profile information, and linked accounts. Meta has secured impacted accounts and invalidated all password reset links generated by the compromised system. There is no indication of further exploitation beyond this incident.

Defensive guidance

Meta has disabled the vulnerable AI-powered High Touch Support system and invalidated all password reset links it generated. Affected accounts have been secured with mandatory password resets and re-authentication. Prior to re-launching the recovery tool, Meta will implement proper verification of email addresses against account information to prevent unauthorized password resets. Additionally, Meta is conducting a comprehensive review of similar account recovery processes across its platforms. Users are advised to enable two-factor authentication to enhance account security. Patch status is not explicitly stated but Meta is actively remediating the issue and securing accounts.

References

bleepingcomputer.com/news/security/meta-ai-support-data-breach-affects-20-000-instagram-accounts/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 8 Jun 2026, 06:05 UTC

References

Community reviews