[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-meta-ai-chatbot-bug-let-attackers-seize-20k-instagram-accounts":10},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":24,"persona_id":22,"persona_name":22,"section":22,"tags":25,"sources":29,"feedback":33,"feedback_at":22,"cost_usd":33,"total_tokens":33},400,"meta-ai-chatbot-bug-let-attackers-seize-20k-instagram-accounts","Meta AI chatbot bug let attackers seize 20k Instagram accounts","A coding error in Meta's support bot let hackers reset passwords and take control of over 20,000 Instagram profiles.","- Hackers used Meta's AI support bot to hijack more than 20,000 Instagram accounts.\n\nMeta confirmed the breach in a notice filed in Maine. The bot was working as designed, but a bug in a separate code path failed to verify that the email entered for a password reset matched the account owner's email. Attackers simply asked the chatbot to reset a password and gained access without two‑factor authentication. The company says the flaw affected only a narrow set of requests.\n\nThe incident shows how AI‑powered support tools can become attack vectors when code paths are not isolated. It also highlights the limits of two‑factor safeguards when the reset flow itself is compromised.\n\nMeta says the bug has been patched, but the episode serves as a reminder that any automation handling credentials needs rigorous testing.","[\"instagram\",\"meta\",\"security\"]","2026-06-08T14:31:06.000Z","2026-06-08T15:29:30.592Z","2026-06-08T15:30:21.873Z","published",null,[],"https:\u002F\u002Fcdn.xyz.onl\u002Farticle-images\u002Fmeta-ai-chatbot-bug-let-attackers-seize-20k-instagram-accounts.webp",[26,27,28],"instagram","meta","security",[30],{"name":31,"url":32},"The Verge","https:\u002F\u002Fwww.theverge.com\u002Ftech\u002F945658\u002Fmeta-ai-support-chatbot-exploit-instagram-accounts",0]