Hackers Just Asked Meta's AI Support Bot to Hand Over 20,000 Instagram Accounts

Attackers used basic text prompts to convince Meta's AI-powered High Touch Support assistant to re-link Instagram accounts to attacker-controlled emails, then bypassed weak verification to reset passwords. More than 20,000 accounts were taken over, including the former Obama White House account and Sephora. The breach came from the AI system's own design flaws: elevated admin privileges and prompt-persuadable account recovery.