Meta’s AI support assistant has been linked to a serious security issue affecting Instagram accounts. Reports say the tool was misused to help gain access to some accounts.
Meta AI Chatbot Reportedly Linked to Instagram Account Access Issues
The AI system was created to help users recover accounts, reset passwords, and report scams. It was also designed to give 24/7 support to users. However, researchers say the same system was later used in the wrong way. This led to concerns about account safety on Instagram.
How Meta AI Support Tool Was Misused in Instagram Accounts
According to reports, attackers were able to use the AI support system to change the email address linked to Instagram accounts. Once the email was changed, they could request a password reset. This gave them control over the account in some cases. Security reports also suggest that the system did not always check identity properly. In some cases, extra security steps like two-factor authentication were bypassed. Hackers also used VPN tools to match the target user’s location. The system relied partly on location checks, which made it easier to trick. This situation also highlights wider cybersecurity concerns across platforms, similar to threats seen in Windows remote access 2026 environments.
Meta launched this AI support assistant in December. The goal was to make the account help faster and simpler for Facebook and Instagram users. It was designed to help users with login problems, password recovery, and scam reporting.
But researchers say the verification system had weaknesses. It did not always confirm the real account owner strongly enough. In some cases, users were asked to verify their identity using a selfie. Reports suggest this step was also not fully secure in all situations. Because of these gaps, the system was exploited for a short time before Meta took action.
Security researchers say the issue first appeared on social media platforms over the weekend. Some hackers shared step-by-step methods in online groups and messaging apps. These guides showed how the AI assistant could be tricked into changing account details. Reports also say that some Telegram channels were discussing this method since earlier months. During this time, some Instagram accounts were reportedly taken over, including accounts linked to well-known users and organizations. This highlights broader cybersecurity risks, similar in scale to incidents like the water treatment cyberattack, where critical systems and digital platforms face increasing threats.
Read more: Instructure Data Breach: Hackers Expose Student Data at Education Tech Platform
It was found that there were several influential Instagram accounts affected by this problem. These were the accounts connected with public figures and organizations, as well as verified users. There were even some famous names mentioned in the security reports released online. In some cases, users said they lost access and could not recover their accounts easily. A few users also reported that there was no direct human support option available during recovery attempts.
Meta Fixes Issue After Security Reports and Investigation
Meta has now confirmed that the issue has been fixed. The company says it has secured the system and is protecting affected accounts. A Meta spokesperson stated that the vulnerability has been resolved and improvements are being made. However, Meta has not clearly shared how many accounts were affected during the incident. Security researchers also claim the issue was known and discussed for some time before being fixed.
The above example demonstrates how AI support tools can be beneficial; however, such solutions need adequate security measures in place. In this case, Meta designed the AI system to provide more effective assistance to users. However, the poor verification process became the reason for a security vulnerability. Luckily, this problem is already addressed; however, it should make companies reconsider safety aspects in account verification through AI. News source eTimes Pakistan.
Read more: Hackers Exploit cPanel Vulnerability to Control Thousands of Websites
