META CONFIRMS AI SUPPORT TOOL USED TO HACK 20,000 INSTAGRAM ACCOUNTS

Meta has confirmed that approximately 20,000 Instagram accounts were compromised in a cyberattack that exploited an AI-powered account recovery support tool. Attackers abused the tool to reset passwords on targeted accounts. The incident represents a direct misuse of infrastructure Meta designed to help users regain access to their accounts. Meta disclosed the breach in a public notice to affected users.

The AI support bot in question was built to assist with account recovery processes, a function that requires elevated access to authentication systems. Attackers found a method to abuse this access to force password resets on accounts they did not own. The scale of the incident, at roughly 20,000 accounts, indicates a coordinated effort rather than isolated individual attacks. Meta has not publicly detailed the specific technical mechanism through which the tool was exploited.

The incident highlights a recognised risk in deploying AI-powered support systems that handle sensitive account credentials. Compromised Instagram accounts can be used for fraud, impersonation, or the distribution of malicious content. Meta has not confirmed whether all affected accounts have been secured or restored to their original owners. The company has not publicly stated what remediation steps it has taken to prevent further exploitation of the tool.