Instagram Recovery Tool Bug Exposed 20,225 Accounts to Password Reset Abuse

Meta has reported a security incident involving an Instagram account recovery tool, where attackers exploited a vulnerability to send password reset links to unauthorized email addresses. The incident affected a total of 20,225 users, including 30 residents of Maine. The issue, linked to Instagram’s AI-assisted 'High Touch Support' system, was discovered on May 31, 2026, with the incident occurring on April 17, 2026.