Skip to content

Instagram

1 breach20K affected in allTechinstagram.com

BreachAffected
Attackers tricked Meta AI support assistant into hijacking 20,225 Instagram accountsJan 118 months agoAI or modelUnverified20K
About

Every breach here links to its sources and official notices. Across fru.dev: lawsuits, incidents and outages.

  • 2026-09-25 · Instagram, 2026-01-11 · data_types: ["emails","location","phone","dob","messages","other","credentials"]
  • 2026-09-25 · Instagram, 2026-01-11 · discovered: 2026-05
  • 2026-09-25 · Instagram, 2026-01-11 · summary: Hackers asked Meta's AI-powered support assistant to add attacker email addresses to Instagram accounts and send reset links, taking over accounts without 2FA. Meta said a bug in a separate code path failed to check the email matched the ac
  • 2026-09-25 · Instagram, 2026-01-11 · title: Attackers tricked Meta AI support assistant into hijacking 20,225 Instagram accounts
  • 2026-09-25 · Instagram, 2026-01-11 · source_type: press
  • 2026-09-25 · Instagram, 2026-01-11 · source_url: https://www.bleepingcomputer.com/news/security/meta-ai-support-data-breach-affects-20-000-instagram-accounts/
  • 2026-09-25 · Instagram, 2026-01-11 · country: US
  • 2026-09-25 · Instagram, 2026-01-11 · attack: ai-model
  • 2026-09-25 · Instagram, 2026-01-11 · data_types: ["emails","location","phone","dob","messages","other"]
  • 2026-09-25 · Instagram, 2026-01-11 · records_basis: organization
  • 2026-09-25 · Instagram, 2026-01-11 · records: 20225
  • 2026-09-25 · Instagram, 2026-01-11 · summary: Meta disclosed that its AI-powered High Touch Support tool failed to check that a password reset email matched the account, letting attackers take over 20,225 Instagram accounts without 2FA starting April 17, 2026. Account content, direct m
  • 2026-09-25 · Instagram, 2026-01-11 · title: Attackers abused Meta AI support tool to hijack 20,225 Instagram accounts
  • 2026-09-25 · Instagram, 2026-01-11 · added
  • 2026-09-25 · Instagram · added

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.