By Marcus Reyes
A sophisticated cyberattack has reportedly led to the takeover of more than 20,000 Instagram accounts after hackers found a way to manipulate Meta’s AI-powered support systems, raising fresh concerns about the security risks associated with artificial intelligence.
According to cybersecurity researchers, the attackers exploited weaknesses in an automated customer support process that relied heavily on AI tools to review and process account-related requests. By crafting convincing messages and submitting fraudulent information, the hackers allegedly persuaded the chatbot to grant unauthorized access to Instagram accounts belonging to thousands of users.
The incident highlights a growing challenge facing technology companies as they increasingly integrate artificial intelligence into customer service operations. While AI systems can handle large volumes of requests efficiently, security experts warn that they may be vulnerable to carefully designed social engineering tactics.
Researchers say the attackers used a combination of fake identity documents, manipulated account recovery requests, and AI-generated communications to bypass verification procedures. Once access was obtained, compromised accounts were often used for cryptocurrency scams, fraudulent advertisements, and phishing campaigns targeting followers.
Meta has not publicly disclosed the full scope of the incident, but reports indicate that affected users experienced account lockouts, unauthorized password changes, and suspicious activity originating from their profiles.
Cybersecurity specialists caution that AI systems can sometimes be persuaded by highly tailored inputs, particularly when automated tools are granted significant authority over account recovery decisions. The case serves as a reminder that human oversight remains a critical component of digital security.
Users are being advised to enable two-factor authentication, use strong and unique passwords, and regularly review account security settings to reduce the risk of unauthorized access. Experts also recommend being cautious of unexpected messages requesting login credentials or personal information.
The alleged breach comes at a time when technology firms are racing to deploy AI-powered services across their platforms. While these tools promise greater efficiency and convenience, incidents like this underscore the need for stronger safeguards to prevent abuse.
As investigations continue, cybersecurity researchers say the attack could become a case study in how emerging AI systems can be manipulated by determined threat actors—and why companies must balance automation with robust security controls.