Instagram hacked – Meta told users an Instagram account takeover issue was fixed after hackers allegedly used Meta AI’s chatbot to reset passwords and seize accounts. But more people reported new compromises on Tuesday, while discussions on Telegram suggested the same approach c
For some Instagram users, the warning arrived like a familiar shock: an email saying their account may have been compromised. Only this time, it was happening after Meta publicly insisted the problem had already been resolved.
Over the weekend, hackers claimed they were exploiting Meta’s AI support chatbot to take over several high-profile Instagram accounts. At the same time. a large number of people complained on social media that their Instagram accounts had been hacked. including victims with unique short profile handles.
TechCrunch shared examples of allegedly hacked handles featuring common forenames or names of countries—handles that can then be resold in a gray market as “OG handles.” Other victims reportedly included the dormant Obama White House account. which Meta disputed. and the account of U.S. Space Force chief master sergeant John Bentivegna.
The attack method described in the reporting sounded almost too straightforward to be called sophisticated. Hackers told Meta’s AI chatbot they were the owners of the target’s Instagram account and asked the bot to link the person’s Instagram to an email controlled by the attacker. The chatbot complied. allowing the hacker to reset the victim’s password and take control of the account. in some cases locking victims out. The reporting says that at no point were Meta employees or contractors involved in the chat.
A screenshot of a successful takeover—posted in a Telegram group where hackers shared the technique and bragged about their work—was included in the coverage.
On Monday, Meta spokesperson Andy Stone said the issue “that did happen has already been fixed.” On Tuesday, however, more Instagram users claimed their accounts had been hacked.
While Meta worked to secure targeted accounts and alert victims. discussions continued among members of a Telegram channel where the technique had been publicized. The channel’s members claimed they could still exploit Meta’s AI chatbot. and they advertised apparently hacked handles for sale at the time of the writing. The reporting cautioned that it’s difficult to confirm whether all those accounts were taken over using the same method.
Stone later wrote on X that “Some people may receive password reset notifications and some may be asked security questions when they try and log into their accounts.” In an email to TechCrunch. Stone said Meta secured affected accounts on Monday and then began sending password reset emails. but he did not say how many users were hacked.
Several people reported that Meta had started notifying users they were being targeted. Victims described receiving emails from Instagram warning that Meta had “detected some suspicious activity that suggests your Instagram may have been compromised.” The messages said Meta took measures to secure the account and asked users to reset their password.
Meta’s move toward AI-powered support adds pressure to the story. In March. Meta announced it was implementing AI to automate support for users. describing an AI-powered chatbot “designed to resolve account issues from start to finish. ” with the ability to “reset your password securely.” The reporting points to the implication that the chatbot can perform actions that previously required a human being involved.
For years, a market has existed where hackers steal and sell “OG” usernames and handles. But the tactics used to take over those accounts typically required more complicated steps—phishing the victim. taking over their phone number. or bribing insiders at telecom providers. Here, according to the account, hackers were able to proceed by asking the chatbot directly, and the chatbot complied.
Instagram Meta AI AI chatbot account takeover cybersecurity OG handles Telegram password reset Andy Stone