Instagram’s AI Password Reset Was the Weak Link — 2FA Wasn’t

Meta has confirmed that more than 20,000 Instagram accounts were taken over after attackers abused an AI-assisted account recovery flow. A breach notice filed with Maine’s attorney general’s office covers compromises that ran from about mid-April until Meta shut the flaw down in early June 2026.

The attack did not need a stolen password. Hackers talked Meta’s support chatbot into treating a password-reset request as legitimate, then had the reset link or verification code sent to an email they controlled — not the address on the account.

How the chatbot reset was abused

According to Meta’s notice, the issue was a vulnerability in an AI-assisted Instagram account recovery system. Attackers could perform password resets on accounts that did not have two-factor authentication enabled.

Meta said the tool itself worked as designed, but a separate code path failed to verify that the email used for recovery matched the email tied to the Instagram account. When someone provided an unrelated address, the system sent a password reset link there instead of rejecting the request.

Once that link arrived in the attacker’s inbox, they could reset the password and use the account like the owner — including profile data, posts, direct messages, and linked services.

Why a strong password was not enough

A strong password only helps if nobody else can reset it. Here the reset itself was the bug. Accounts without two-factor authentication were the ones that fell.

Meta has said it is unaware of what personal information was actually accessed during the takeovers. It disabled the AI chatbot recovery path, removed the unsafe code path, told affected users to reset passwords through verified channels, and said it is reviewing similar chatbots across its platforms.

What you should do

• Turn on two-factor authentication — preferably an authenticator app or a passkey, not SMS alone.
• Read our guide to passkeys if you want a phishing-resistant option that skips shared secrets.
• Use a unique password on every account. Generate one with our password generator and store it in a manager.
• Treat unexpected “reset your password” emails as a red flag — especially if you did not ask for one.
• Review the recovery email and phone on important accounts so they cannot be quietly swapped.
• High-value logins should not rely on a password alone — see 10 accounts that need more than a password.

The wider lesson for AI account recovery

AI support tools that can change credentials need the same hard checks as any other recovery system: verify identity, do not treat free-form chat as proof of ownership, and never send reset codes to unverified addresses.

This incident is a reminder that convenient recovery without hard verification is still a password-reset attack — just with a chatbot in the middle.

Source

Zack Whittaker, this week in security — Meta confirms thousands of Instagram accounts were hacked by abusing its AI chatbot