Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts

2026-06-09T19:23:29Zd0c4e7f0907c72d29c040148f4688937cc33df8d4cc1ddbe00f9201ef33c2585
account-takeoverai-social-engineeringaws-govcloudbotnetcredential-exposuredata-extortiondata-leakddosdisinformationgithub-exposureinfrastructure-seizurelaw-enforcementnation-state-activitypatchingransomwarezero-day

What happened

Multiple high-impact security incidents and law-enforcement actions were reported: attackers abused Meta’s AI support assistant to reset Instagram passwords and briefly deface high-profile accounts (including the Obama White House and a senior U.S. Space Force account); a CISA contractor publicly leaked highly privileged AWS GovCloud keys and internal build/deploy secrets on GitHub; the Canvas education platform suffered a large data-extortion attack threatening data on ~275 million students and staff; Dutch authorities seized ~800 servers and arrested hosting co-owners accused of supporting俄‑

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
krebs_on_security
Record identifier
d0c4e7f0907c72d29c040148f4688937cc33df8d4cc1ddbe00f9201ef33c2585
Enrichment time
2026-06-09T19:23:29Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts · Baitaphish