Meta's Instagram AI support bot was weaponized against its own users, with hackers using it to take over around 20,000 accounts.
Attackers found a way to manipulate Meta's AI-powered customer support system into authorizing account takeovers. The compromised accounts included some notable targets — among them the White House, US Space Force, and security researcher Jane Wong. Meta has since confirmed the final tally at approximately 20,000 accounts and described the steps it has taken in response.
The incident illustrates a structural problem with AI systems that have the authority to take consequential actions — resetting credentials, reassigning account access — without robust verification. Exploiting a human support agent requires social engineering one person at a time; a vulnerable AI bot scales that attack automatically. The presence of White House and US Space Force accounts in the victim list suggests the campaign was broad rather than targeted, which makes the total scope more unsettling, not less.
Meta has spent years positioning AI as the backbone of its customer support operation. It turns out that same infrastructure makes a reasonably efficient master key.