Meta AI Flaw Allowed Instagram Account Hijacks, Password Resets

A significant cybersecurity vulnerability in Meta's AI-powered account recovery system, known as High Touch Support (HTS), allowed malicious actors to hijack over 20,000 Instagram accounts. The flaw, which Meta identified on May 31, 2026, and confirmed to have been exploited as early as April 17, 2026, permitted unauthorized password resets without adequate identity verification. The exploitation method involved attackers engaging with the Meta AI support chatbot, designed to assist users with account recovery, and manipulating it through a form of social engineering or 'prompt injection'. Attackers would typically use a Virtual Private Network (VPN) to spoof their geographic location, making it appear as if they were in the target account owner's region, thereby bypassing initial security flags. Once connected to the AI assistant, the attacker would claim to be the legitimate account owner and request to link the target Instagram account to a new email address, which was controlled by the attacker. Due to a bug in a separate code path, the Meta AI system failed to properly verify if the provided email address matched the one already associated with the user's Instagram account. Consequently, the AI bot would dutifully send a one-time verification code to the attacker's email address. Upon receiving and relaying this code back to the chatbot, the attacker was then presented with an option to reset the account's password, effectively gaining full control. This sophisticated yet alarmingly simple exploit bypassed standard security measures, including two-factor authentication (2FA) in many cases, as the system treated the AI-initiated recovery flow as an authoritative ownership claim. Videos and screenshots detailing this exploit circulated widely on platforms like Telegram, enabling even low-sophistication actors to perform account takeovers. Among the compromised accounts were several high-profile Instagram profiles, including the archived Barack Obama White House account, the Chief Master Sergeant of the U.S. Space Force, and the beauty retailer Sephora. The takeover of the Obama White House account, which had been dormant since 2017, saw it briefly defaced with pro-Iranian images and messages. Security researchers like Jane Manchun Wong also reported being affected. Meta responded swiftly to the crisis. On May 31, 2026, the company disabled the vulnerable AI-assisted HTS support tool and invalidated all existing password reset links generated through the exploited workflow. They also implemented a mandatory security checkpoint for affected accounts, requiring users to reset their passwords and reauthenticate through secure, verified channels. Meta emphasized that the issue was a flaw in the AI's logic layer and not a breach of its backend database or systems, meaning no direct database access or credential theft occurred. This incident highlights the inherent risks of offloading critical security and account recovery functions to AI chatbots without robust, independent verification mechanisms. Experts warned that AI agents should not be able to execute sensitive identity actions without hard authorization, least privilege, auditability, and out-of-band verification. The incident also raised questions about Meta's decision to aggressively invest in AI infrastructure while simultaneously reducing its human workforce, including integrity and cybersecurity teams. The company has committed to fixing the authentication check in the Instagram recovery entry point to ensure proper verification of email addresses before any password reset is initiated and is conducting a comprehensive review of similar account recovery flows across its platforms.

Frequently Asked Questions

Read Full Story on Quick Digest