Cases › security breach › LR-2026-0534
Hackers take over Instagram accounts by tricking Meta AI support chatbot
Preliminary Why: 1 report: TechCrunch · subject to change · 1 independent report
Developing: a major or severe case captured in the last 72 hours. Later changes are logged on the corrections page.
Status: action reported, no fix
No source states: loss or records, developer and model, agent tool, could do, deployer, industry.
Severity major: Live production compromise: the test is a live production compromise, as several users' Instagram accounts were hacked.
Meta's AI Support Assistant, a chatbot that can perform account actions on Facebook and Instagram, was reported to have been used to take over Instagram accounts. The attack appeared to rely on tricking the chatbot into granting access to a victim's account. An attacker opened a chat with the bot and asked it to add a new email address to a target account; the chatbot sent a verification code to that address, and after the code was shared back, the bot showed a password reset option. Affected accounts reportedly included the inactive Obama-era White House handle and a U.S. Space Force chief master sergeant's account. Users on Reddit and X raised the alarm, and a security researcher said her account was also taken over. An Instagram spokesperson said the issue was now fixed.
What happened
What was done
Risks
Also63 incidents
Rising: 5 vs 2.2 a week
Read from the sources; not yet reviewed by a person.
Controls
HarnessDid not exist Confirmation after untrusted input
Control failure chain
L1 · ModelProvider not namedModel provider
No source mentions a control at this layer.
Model version not linked to a model card.
L2 · HarnessHarness not namedAgent framework vendor
L3 · ApplicationDeployer not namedDeployer
No source mentions a control at this layer.
Other controls for this risk at this layer, not mentioned in the sources: Short-lived, scoped credentials, Secrets kept out of the model's context, Separate identity for each agent, Least-privilege access for the agent, Alerts on unusual tool use, Activity logs, Sensitive-data checks on outbound data.
L4 · Infrastructure / targetOrganisation hit
No source mentions a control at this layer.
Other controls for this risk at this layer, not mentioned in the sources: Multi-factor sign-in and password policy, Secrets scanning.
EffectiveNot effectiveNot effective (bypassed)Did not existNot stated in sourcesNot yet checkedAttacker's ownOrder: model · harness · application · target
Controls for this risk: result in this incident
| Control | Part of the system | Result |
|---|---|---|
| Confirmation after untrusted input | L2 Harness | Did not exist |
| Least-privilege access for the agent | L3 Application | Not stated in sources |
| Separate identity for each agent | L3 Application | Not stated in sources |
| Short-lived, scoped credentials | L3 Application | Not stated in sources |
| Secrets kept out of the model's context | L3 Application | Not stated in sources |
| Activity logs | L3 Application | Not stated in sources |
| Alerts on unusual tool use | L3 Application | Not stated in sources |
| Sensitive-data checks on outbound data | L3 Application | Not stated in sources |
| Multi-factor sign-in and password policy | L4 Infrastructure / target | Not stated in sources |
| Secrets scanning | L4 Infrastructure / target | Not stated in sources |
Similar incidents
Evidence
No source states: what it reached or did, when it happened, when it was found, how many records were exposed, the direct loss, a count of the other parties affected, any court case, the cause, what set it off.
Show the full account: 5 items from the primary sources
What happened, in order
- 2017-01-20 Last post on the Obama White House Instagram account before the takeover.
- February 2026 The exploit was reportedly in active use, per Neowin's claim.
- March Meta announced AI support for all Facebook and Instagram accounts, including password reset ability.
Not dated in the sources:
- Users reported compromised accounts on Reddit, and warnings appeared on X.
- Instagram said the issue was now fixed.
Show every field, with its source and grade
The AI system
What happened
Impact
Notes on gaps
Sources are press reports, and none is a Meta or government account.
LR-2026-0534 · version 1 · published 2026-11-01 after automatic checks; not yet checked field by field by a person · JSON