META has reported a security incident involving an Instagram account recovery tool, where attackers exploited a vulnerability to send password reset links to unauthorized email addresses. The incident affected a total of 20,225 users, including 30 residents of Maine. The issue, linked to Instagram’s AI-assisted 'High Touch Support' system, was discovered on May 31, 2026, with the incident occurring on April 17, 2026.
Instagram Recovery Tool Bug Exposed 20,225 Accounts to Password Reset Abuse
Article by CyberSIXT