Meta says Instagram AI recovery flaw hit 20,225 accounts (opens in new tab)

Meta is notifying at least 20,225 people that attackers compromised their Instagram accounts after exploiting “a vulnerability in an AI-assisted account recovery system for Instagram” to reset passwords, according to a data breach notice filed with Maine’s attorney general and described by This Week in Security. The notice said 30 people in Maine were affected and that attackers could take over Instagram accounts and linked accounts, obtain contact information, dates of birth and profile info...