Hackers successfully seized high-profile Instagram accounts by exploiting Meta's AI-powered support chatbot. Attackers manipulated the chatbot to change account email addresses and initiate password resets without sufficient identity verification. This prompt injection method allowed unauthorized users to receive password reset links and gain full account access.
The vulnerability led to the compromise of several valuable accounts, including the dormant Barack Obama White House account. Meta confirmed the issue originated within the AI's decision-making logic rather than a backend system breach. The company has since deployed a fix to address the security flaw.