Hackers hijacked high-profile Instagram accounts by simply asking Meta's AI chatbot to change the email

Editor's take

Hackers exploited a vulnerability in Meta's AI support chatbot, enabling them to redirect Instagram account ownership by requesting email address changes without proper identity verification.

This incident highlights a critical blind spot in AI-driven customer support, demonstrating how sophisticated social engineering can bypass even multi-factor authentication mechanisms. The compromised accounts, including a historically significant one like the Obama White House Instagram, underscore the potential for widespread reputational and security damage when AI systems aren't robustly secured against adversarial inputs. The ease with which this exploit, reportedly involving a simple chatbot prompt, bypassed security measures is concerning for the broader adoption of AI in sensitive enterprise functions.

Moving forward, the focus will be on Meta's implemented fixes and whether similar vulnerabilities exist within other AI-powered support systems across major tech platforms. The true test lies in whether this incident prompts a more rigorous, security-first approach to AI development and deployment, particularly for systems handling account management and sensitive user data, rather than a reactive patch.