Executive Summary
Meta says 20,000 Instagram accounts were hacked by abusing an AI-based account recovery support tool.
What Happened
The social media giant has informed authorities about the impact of the recent attack involving an account recovery support tool. The post Meta Says 20,000 Instagram Accounts Hacked via AI Tool Abuse appeared first on SecurityWeek .
Affected Products
- Meta account recovery tool
Vulnerability / Attack Technique
Abuse of an AI support tool for account takeover
Technical Mechanism
Attackers manipulated the AI recovery assistant into handing over accounts.
AI Security Category
LLM06:2025 Excessive Agency
Part of the AI Agent Excessive Agency topic.
Relevant Frameworks
RealGround Analysis
An AI support agent with power to change account ownership became the attack path. RealGround analysis: account recovery decisions need human or strong-proof checks.
Recommended Controls
- Do not let AI support agents change account ownership without verification
- Monitor recovery requests for bulk abuse
Related RealGround Service
AI Agent Business Logic Audit · or start with the free AI Agent Security Scanner.
Sources
securityweek.com: https://www.securityweek.com/meta-says-20000-instagram-accounts-hacked-via-ai-tool-abuse/
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.