Hackers tricked Meta's AI chatbot into handing over Instagram accounts, including Obama's

Hackers abused Meta’s AI support chatbot to reset Instagram accounts and change the recovery email to attacker-controlled addresses.

They used VPNs to appear in the target’s region and bypass location checks, then requested reset codes sent to their own email.

The flaw, surfaced via Telegram logs and 404 Media, appears to have affected valuable short or common usernames and possibly high-profile accounts.

Meta said it has now fixed the loophole, highlighting risks in automated account recovery systems.