
Instagram AI chatbot breach may have affected over to 20,000 accounts, Meta discloses
Quick Answer
This paper shows that Meta disclosed that a security breach in its Instagram AI chatbot compromised at least 20,225 accounts.
Quick Take
Meta disclosed that a security breach in its Instagram AI chatbot compromised at least 20,225 accounts. For nearly seven weeks, the chatbot sent password reset links to random email addresses without verifying ownership, undermining its initial promise of enhanced account security.
Key Points
- Over 20,225 Instagram accounts were compromised due to the chatbot breach.
- The breach lasted for nearly seven weeks, affecting user account security.
- Password reset links were sent to arbitrary email addresses without verification.
- The AI chatbot was initially marketed as a security enhancement for accounts.
- Meta's disclosure marks the first time specific numbers have been revealed.
Article Excerpt
From source RSS / original summaryMeta has put a number on the security breach in its AI support chatbot for Instagram for the first time: at least 20,225 accounts were compromised. For nearly seven weeks, the system sent password reset links to arbitrary email addresses without verifying they belonged to the account. The chatbot had previously been marketed as a win for account security. The article Instagram AI chatbot breach may have affected over to 20,000 accounts, Meta discloses appeared first on The Decoder.
Reader Mode unavailable (could not extract clean content).
Want this in your inbox every morning?
Daily brief at your local 8am — bilingual EN/中文, free.
More from The Decoder
See more →
OpenAI models now available on Amazon Web Services
OpenAI has launched GPT-5.5, GPT-5.4, and Codex on Amazon Bedrock, matching its own pricing. Currently, these models are available only in the US across commercial and government AWS regions, with usage contributing to existing AWS contracts.


