{"id":238597,"date":"2026-06-09T02:36:53","date_gmt":"2026-06-09T07:36:53","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/06\/over-20000-instagram-accounts-stolen-in-meta-ai-support-hack"},"modified":"2026-06-09T02:36:53","modified_gmt":"2026-06-09T07:36:53","slug":"over-20000-instagram-accounts-stolen-in-meta-ai-support-hack","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/06\/over-20000-instagram-accounts-stolen-in-meta-ai-support-hack","title":{"rendered":"Over 20,000 Instagram accounts stolen in Meta AI support hack"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/over-20000-instagram-accounts-stolen-in-meta-ai-support-hack.jpg\"><\/a><\/p>\n<p>Meta has revealed that 20,225 Instagram users had their accounts hijacked in a recent incident where attackers used Meta\u2019s AI-powered support system to reset passwords.<\/p>\n<p>As BleepingComputer reported one week ago, the threat actors <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/instagram-users-locked-out-after-meta-ai-abused-to-steal-accounts\/\" target=\"_blank\" rel=\"nofollow noopener\">exploited a flaw in the company\u2019s High Touch Support (HTS) tool<\/a>, an AI-assisted support system that helps users regain access after being locked out of their Instagram accounts.<\/p>\n<p>By exploiting the fact that HTS didn\u2019t verify whether email addresses were associated with the targeted Instagram accounts, they obtained password reset links that allowed them to log in and hijack accounts without two-factor authentication (2FA) enabled.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Meta has revealed that 20,225 Instagram users had their accounts hijacked in a recent incident where attackers used Meta\u2019s AI-powered support system to reset passwords. As BleepingComputer reported one week ago, the threat actors exploited a flaw in the company\u2019s High Touch Support (HTS) tool, an AI-assisted support system that helps users regain access after [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34,6],"tags":[],"class_list":["post-238597","post","type-post","status-publish","format-standard","hentry","category-cybercrime-malcode","category-robotics-ai"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/238597","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=238597"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/238597\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=238597"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=238597"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=238597"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}