Incident·WS-0103·Jun 1, 2026·in the wild·AI security flaws

Hackers sweet-talk Meta's AI support bot into account takeovers

Meta AI support assistant (Facebook/Instagram account recovery)

46/100
WS-3 Serious
Harm score 40, signal score 54. Autonomy: acted (the AI took a bounded action). How the scores work.
Harm 2/5
damage actually done
Reach 2/5
who was affected
Autonomy 2/4
how much the AI did on its own
Novelty 3/5
how new the behavior was
Permanence 2/5
how hard it is to undo

404 Media reported that attackers took over high-profile Instagram accounts by asking Meta's AI support agent to attach a new email address to the target account. The agent could carry out account-recovery actions, and it did so without adequate verification. Meta had expanded AI-driven account support in March 2026.

Damage

multiple high-profile accounts hijacked (incl. Obama White House archive, Space Force CMSgt, Sephora); total count unknown

Sources

404 Media, second source. Evidence confidence: medium. The date shown is the report date; the takeovers happened shortly before 1 Jun 2026. No Meta statement was found in the retrieved text.

Factor ratings and the score are this index’s judgments by a published formula; facts, dates and figures come from the linked sources. Where a lawsuit is pending, the summary reports allegations, not findings.