
Meta disclosed that at least 20,225 Instagram accounts were compromised by hackers exploiting a bug in its AI-powered High Touch Support chatbot. The flaw sent password reset links to unverified email addresses. The campaign ran from April 17 to May 31, 2026. Meta disabled the chatbot and invalidated all reset links.
Tracked by ByteBrief