Hackers hijacked Instagram accounts by tricking Meta AI support chatbot into granting access | TechCrunch
SearchSubmit
Site Search Toggle
Mega Menu Toggle
Topics
Latest
AI
Amazon
Apps
Biotech & Health
Climate
Cloud Computing
Commerce
Crypto
Enterprise
EVs
Fintech
Fundraising
Gadgets
Gaming
Government & Policy
Hardware
Layoffs
Media & Entertainment
Meta
Microsoft
Privacy
Robotics
Security
Social
Space
Startups
TikTok
Transportation
Venture
More from TechCrunch
Staff
Events
Startup Battlefield
StrictlyVC
Newsletters
Podcasts
Videos
Partner Content
TechCrunch Brand Studio
Crunchboard
Contact Us
Image Credits: Matthias Balk/picture alliance / Getty Images
Security
Hackers hijacked Instagram accounts by tricking Meta AI support chatbot into granting access
Lorenzo Franceschi-Bicchierai
11:34 AM PDT · June 1, 2026
Instagram has resolved a security issue that allowed several users’ accounts to get hacked. The attack appeared to rely on tricking Meta’s own AI-powered support chatbot into granting access to a victim’s account.
Over the weekend, several users on Reddit claimed that their Instagram accounts had been compromised, and a number of users on X warned of similar account hijackings. The compromised accounts include the Instagram handle for the Obama-era White House, which appears to have been inactive since 2017; and the account of the U.S. Space Force’s chief master sergeant John Bentivegna.
Security researcher Jane Wong said her Instagram account was also taken over.
“The password got changed without my knowledge and I was getting different password reset attempts throughout yesterday,” said Wong. “Quite concerning.”
A video posted on X showed the step-by-step process to hack someone’s Instagram account. The hacker allegedly used a VPN to spoof the targets’ presumed location to avoid triggering Instagram’s automated account protections. Then, the hacker opened a chat with Meta AI Support Assistant and asked the bot to add a new email address to the target’s account. The chatbot can be seen sending a verification code to the email address provided by the hacker; the hacker then shares the verification code with the chatbot, which prompts the chatbot to show a button to “Reset Password.” The hacker enters a new password and takes over the victim’s account.
Contact Us
Do you have more information about these Instagram hacks? Or other flaws affecting Instagram? We’d love to hear from you. From a non-work device and network, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, or via Telegram and Keybase @lorenzofb, or email.
TechCrunch was able to verify that the hacker’s public email mailbox, which was displayed in the video, effectively received the verification code.
The attack relied on the fact that at no point the hacker had to take over the legitimate email address linked to the victims’ Instagram account.
On Monday, Instagram spokesperson Andy Stone said in a reply to Wong’s post and others that the issue was now fixed. It’s unclear how many Instagram users had their accounts improperly accessed.
Meta did not immediately respond to TechCrunch’s request for comment.
Topics
AI, cybercrime, cybersecurity, hackers, hacking, Instagram, Meta, Security
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Lorenzo Franceschi-Bicchierai
Senior Reporter, Cybersecurity
Lorenzo Franceschi-Bicchierai is a Senior Writer at TechCrunch, where he covers hacking, cybersecurity, surveillance, and privacy.
You can contact or verify outreach from Lorenzo by emailing lorenzo@techcrunch.com, via encrypted message at +1 917 257 1382 on Signal, and @lorenzofb on Keybase/Telegram.
View Bio
June 18
Los Angeles
Get an inside look at what it takes to scale and succeed from leaders at Mach Industries, Founders Fund, and Shinkei Systems. Through candid fireside chats and high-impact networking, you’ll walk away with valuable insights and new connections.
REGISTER NOW
Most Popular
‘What a joke’: GitHub Copilot’s new token-based billing spurs consternation among devs
Lucas Ropek
I put Google’s 24/7 AI assistant Gemini Spark to work, and it’s actually pretty useful
Sarah Perez
Blue Origin’s New Glenn rocket explodes during testing in Florida
Sean O'Kane
Anthropic releases Opus 4.8 with new ‘dynamic workflow’ tool
Russell Brandom
Google engineer charged with insider trading after making $1.2M on Polymarket
Amanda Silberling
Meta launches Instagram, Facebook, and WhatsApp subscriptions, with more to come, including AI plans
Sarah Perez
Tech CEOs are apparently suffering from AI psychosis
Julie Bort
Loading the next article
Error loading the next article
© 2026 TechCrunch Media LLC.