{"meta":{"exportedAt":"2026-10-24T01:53:54.479Z","formatVersion":2,"selection":{"q":"facebook","system":"","harm":"","context":"","country":"","role":"","relation":"contextual","evidence":"","year":"","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":5,"coverage":{"cases":5,"countries":2,"languages":2,"unknownLocation":3,"locationPending":0,"unknownLanguage":0,"unknownDate":1,"lawsuits":0,"regulatory":0,"minors":2,"coreRelations":2,"contextualRelations":5,"mixedRelations":2,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2026-meta-instagram-ai-assisted-account-recovery-tool-exploited-to-reset-passwords","caseFacts":{"claims":[{"id":"c1","status":"corroborated","evidence":[{"locator":"the system incorrectly sent a password reset link to that unassociated email rather than rejecting the request","relation":"supports","source_id":"s1"},{"locator":"This allowed unauthorized third parties to receive a password reset link for accounts they did not own","relation":"supports","source_id":"s1"},{"locator":"The chatbot can be seen sending a verification code to the email address provided by the hacker","relation":"supports","source_id":"s3"},{"locator":"TechCrunch was able to verify that the hacker’s public email mailbox, which was displayed in the video, effectively received the verification code.","relation":"supports","source_id":"s3"}],"assertion":"Through Meta's AI-assisted account recovery support system (High Touch Support), third parties received password reset links or verification codes for Instagram accounts they did not own, sent to an email address that was not associated with the account.","causal_attribution":"Two evidential bases: Meta's own notice to the Maine Attorney General (a party's account of its own system) and videos the attackers posted, in which TechCrunch confirmed that the mailbox shown received the verification code. TechCrunch's check covers that one delivery. It did not test which Meta tool sent the code or who owned the target account, and the videos were not opened for this review. The link between the chat assistant in the videos and High Touch Support is made by press reports and by Meta's spokesperson referring to the AI agent. No inspected document names both. Meta says the tool worked as intended and the failure lay in a separate code path (see c5), so the AI component's own contribution is disputed."},{"id":"c2","status":"reported","evidence":[{"locator":"the hacker opened a chat with Meta AI Support Assistant and asked the bot to add a new email address to the target’s account.","relation":"supports","source_id":"s3"},{"locator":"which prompts the chatbot to show a button to “Reset Password.”","relation":"supports","source_id":"s3"},{"locator":"One video shows a hacker starting a conversation with Meta’s AI support bot and asking it to link the target account with a new email address","relation":"supports","source_id":"s5"},{"locator":"using a VPN connection with an IP address that is in or near the target’s usual hometown","relation":"supports","source_id":"s6"},{"locator":"The bot followed through with the request - sending a code to the hacker's email which, when verified, was followed by an email with a link to change their password.","relation":"supports","source_id":"s7"}],"assertion":"Attackers asked Meta's AI support assistant in a chat to add or link a new email address to a target Instagram username, and some used a VPN to appear in the target's location. In one video the assistant then sent a verification code to that address and showed a button to reset the password.","causal_attribution":"Every account of the chat steps traces to videos and screenshots the attackers posted on Telegram and X. TechCrunch checked one displayed mailbox. The other videos were not independently reproduced."},{"id":"c3","status":"reported","evidence":[{"locator":"the unauthorized party was able to log in to the account if the account holder had not enabled two-factor authentication (2FA)","relation":"supports","source_id":"s1"},{"locator":"The hackers who released the video on Telegram said their exploit failed to work against any accounts that had MFA enabled.","relation":"supports","source_id":"s6"}],"assertion":"Meta's notice says the account could be logged into after the password reset if the account holder had not enabled two-factor authentication. Krebs on Security reports that the attackers who posted the video said the exploit failed against accounts with multi-factor authentication.","causal_attribution":"Meta's statement about its own system and the attackers' own statement as relayed by Krebs. Neither was tested independently."},{"id":"c4","status":"reported","evidence":[{"locator":"it can also take action for you on a growing set of requests directly within Facebook and in the future, on Instagram, including:","relation":"supports","source_id":"s12"},{"locator":"Resetting passwords","relation":"supports","source_id":"s12"},{"locator":"We’ve also started rolling out the support assistant to people who need help logging into their Facebook and Instagram accounts, starting with select cases in the US and Canada","relation":"supports","source_id":"s12"}],"assertion":"Meta announced the Meta AI support assistant for Facebook and Instagram on 19 March 2026, described it as able to take action on requests including resetting passwords directly within Facebook and, in the future, on Instagram, and said it had started rolling it out to people who need help logging into Facebook and Instagram accounts, starting with select cases in the US and Canada.","causal_attribution":"Meta's own product announcement. The announcement does not say which tool the exploited flow used. The link between this assistant and the High Touch Support tool named in Meta's notice is made by the press reports and by the notice's own description of an AI-assisted account recovery system."},{"id":"c5","status":"disputed","evidence":[{"locator":"The tool itself worked properly and functioned as intended; however due to a bug in a separate code path, the system did not properly verify that the email address provided by the individual requesting a password reset matched the email address associated with that user’s Instagram account.","relation":"supports","source_id":"s1"},{"locator":"Some of our internal backend checks failed in this instance, but it wasn’t due to the AI agent itself, and we’ve addressed the underlying cause.","relation":"supports","source_id":"s11"},{"locator":"Hackers simply told Meta’s AI chatbot that they were the owners of the target’s account, and asked the bot to link that person’s account to an email they controlled. The chatbot complied with the request","relation":"contradicts","source_id":"s4"}],"assertion":"Whether the failure lay in the AI agent or in a separate code path is disputed. Meta's notice says the tool worked as intended and that a bug in a separate code path did not check the requester's email address against the account, and a Meta spokesperson told Gizmodo that some internal backend checks failed and that this was not due to the AI agent itself. TechCrunch describes the chatbot as complying with the attackers' request.","causal_attribution":"Meta's account of its own system. TechCrunch's description of the chatbot as complying with the request is a reporter's characterisation from the attackers' videos and does not test where in Meta's system the check failed."},{"id":"c6","status":"reported","evidence":[{"locator":"Date(s) Breach Occured: 04/17/2026","relation":"supports","source_id":"s2"},{"locator":"Date Breach Discovered: 05-31-2026","relation":"supports","source_id":"s2"},{"locator":"May 31, 2026, Meta discovered that there was a vulnerability in an AI-assisted account","relation":"supports","source_id":"s1"},{"locator":"same day the exploitation was identified by Meta, the following actions were taken to","relation":"supports","source_id":"s1"},{"locator":"the AI-assisted support tool removing the vulnerable code path from production","relation":"supports","source_id":"s1"}],"assertion":"Meta's notice lists 17 April 2026 as the date the breach occurred (as 04/17/2026) and 31 May 2026 as the date it discovered the vulnerability, and says Meta disabled the AI-assisted support tool on the same day the exploitation was identified.","causal_attribution":"Meta's own dates for its own system. The notice letter gives the discovery date and no start date. The 17 April date appears only in the listing form, and the basis for it is not stated."},{"id":"c7","status":"reported","evidence":[{"locator":"Total number of persons affected (including residents): 20225","relation":"supports","source_id":"s2"},{"locator":"Total number of Maine residents affected: 30","relation":"supports","source_id":"s2"},{"locator":"reset through the support tool, did not have 2FA enabled on their account and whose Instagram accounts were likely accessed by an unauthorized party.","relation":"supports","source_id":"s1"},{"locator":"This number represents an upper bound of the users impacted as some of the accounts may have been accessed legitimately by account owners.","relation":"supports","source_id":"s1"}],"assertion":"The Maine Attorney General listing of Meta's submission gives 20225 as the total number of persons affected and 30 as the number of Maine residents. The notice defines the Maine figure as users whose passwords were reset through the tool, who had no two-factor authentication and whose accounts were likely accessed by an unauthorized party, and calls it an upper bound because some accounts may have been accessed legitimately by their owners.","causal_attribution":"Meta's own estimate. The notice's upper-bound wording is written for the Maine figure. The inspected notice does not say whether the total of 20225 counts accounts or people, how many were taken over, or how many are organisational accounts."},{"id":"c8","status":"reported","evidence":[{"locator":"“The password got changed without my knowledge and I was getting different password reset attempts throughout yesterday,” said Wong.","relation":"supports","source_id":"s3"},{"locator":"And I got repeatedly logged out from the IG iOS app[.] Quite concerning.","relation":"supports","source_id":"s10"},{"locator":"it took about five to 10 minutes to reinstate her account","relation":"supports","source_id":"s9"},{"locator":"Wong, who previously worked at Meta as a security engineer, said in a post on X her Instagram password was \"changed without my knowledge\"","relation":"supports","source_id":"s7"}],"assertion":"Jane Manchun Wong, a security researcher and former Meta employee, posted on X that her Instagram password was changed without her knowledge, that she received password reset attempts and was repeatedly logged out of the app, and told Reuters that reinstating her account took about five to ten minutes.","causal_attribution":"Her own public statements, relayed by four outlets. The X post itself was not opened. Wong does not say in the quoted statements how her account was accessed, and the outlets connect it to the exploit."},{"id":"c9","status":"reported","evidence":[{"locator":"and the account of the U.S. Space Force’s chief master sergeant","relation":"supports","source_id":"s4"},{"locator":"the account of the U.S. Space Force’s chief master sergeant","relation":"supports","source_id":"s3"},{"locator":"the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend","relation":"supports","source_id":"s6"},{"locator":"the Chief Master Sergeant of Space Force’s account","relation":"supports","source_id":"s5"}],"assertion":"TechCrunch and Krebs on Security report that the Instagram account of the U.S. Space Force's Chief Master Sergeant was compromised, and Krebs reports that it was briefly defaced with pro-Iranian images and messages.","causal_attribution":"Reporters' accounts based on screenshots the attackers posted. The account holder is not quoted in the inspected sources and is described here by office only. Whether the account is a personal or an official office account is not stated."},{"id":"c10","status":"reported","evidence":[{"locator":"including the Barack Obama White House account , the Chief Master Sergeant of Space Force’s account , and Sephora’s account","relation":"supports","source_id":"s5"},{"locator":"The Sephora corporate page and the account belonging to the Chief Master Sergeant of the U.S. Space Force were also hit.","relation":"supports","source_id":"s10"},{"locator":"The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced","relation":"supports","source_id":"s6"},{"locator":"The former US president's account reportedly posted pro-Iran content before it was recovered.","relation":"supports","source_id":"s7"},{"locator":"the dormant Obama White House account (which Meta disputed)","relation":"context","source_id":"s4"}],"assertion":"Outlets named the Sephora corporate account and a dormant Obama White House account among the compromised accounts, and Krebs and the BBC report that the Obama White House account was defaced with pro-Iran content. TechCrunch's 3 June report lists the Obama White House account among apparent victims with the parenthetical '(which Meta disputed)'. Both are organisational or institutional accounts and are not counted as affected persons.","causal_attribution":"Reporters' accounts. The Guardian, Gizmodo and Reuters name Sephora on the strength of 404 Media's reporting, so Sephora rests on one chain. TechCrunch does not say what Meta disputed about the Obama White House account. The BBC reports that Meta's spokesperson called claims that world leaders' accounts were hacked totally false."},{"id":"c11","status":"reported","evidence":[{"locator":"allowing the hacker to reset the target account’s password and take control of the account — in some cases locking out the victims.","relation":"supports","source_id":"s4"},{"locator":"locking users out of their accounts and prompting a wave of complaints on platforms including X and Reddit.","relation":"supports","source_id":"s9"},{"locator":"One X user wrote that they had been unable to find \"human support\" after their Instagram account was hacked.","relation":"supports","source_id":"s7"},{"locator":"Everyday users complained of similar hijackings on Reddit and X over the weekend.","relation":"supports","source_id":"s8"}],"assertion":"Some victims were reported locked out of their accounts, and one person wrote on X that they could not find human support after their Instagram account was hacked.","causal_attribution":"Reporters' summaries of complaints on X and Reddit. The individual posts were not opened and the complainants are not identified."},{"id":"c12","status":"reported","evidence":[{"locator":"TechCrunch has seen examples of allegedly hacked handles featuring common forenames or names of countries","relation":"supports","source_id":"s4"},{"locator":"(It’s important to note that it’s hard to know for sure if all these accounts were hacked due to the same technique.)","relation":"supports","source_id":"s4"},{"locator":"hijack a number of valuable (read: short) Instagram account names that allegedly have a resale value of more than a half million dollars.","relation":"supports","source_id":"s6"},{"locator":"404 Media has seen text files of huge lists of “OG,” or high-value, original usernames","relation":"context","source_id":"s5"}],"assertion":"Short Instagram handles were reported taken in the campaign and offered for resale. TechCrunch saw examples of allegedly hacked handles being advertised for sale and notes it is hard to know whether all were taken with this technique. Krebs reports that the attackers claimed the resale value of the short handles they took exceeded half a million dollars.","causal_attribution":"The resale and value claims come from attackers' Telegram posts as relayed by TechCrunch and Krebs. No sale was confirmed and the owners are not identified."},{"id":"c13","status":"reported","evidence":[{"locator":"\"This issue has been resolved and we are securing impacted accounts,\" Meta spokesperson Andy Stone told users in a statement on X","relation":"supports","source_id":"s7"},{"locator":"On Monday, Instagram spokesperson Andy Stone said in a reply to Wong’s post and others that the issue was now fixed.","relation":"supports","source_id":"s3"},{"locator":"Invalidated all existing password reset links that had been generated through the vulnerable path","relation":"supports","source_id":"s1"},{"locator":"potentially affected accounts into a mandatory security checkpoint requiring authentication before any account access","relation":"supports","source_id":"s1"},{"locator":"impacted users to reset their passwords and re-authenticate through secure, verified channels","relation":"supports","source_id":"s1"}],"assertion":"A Meta spokesperson said on X on 1 June 2026 that the issue was resolved and Meta was securing impacted accounts. Meta's notice says that it disabled the tool, invalidated existing password reset links generated through the vulnerable path, enrolled potentially affected accounts in a mandatory security checkpoint and told impacted users to reset their passwords.","causal_attribution":"Meta's statements about its own response. TechCrunch reports that the response did not end the reports (see c14)."},{"id":"c14","status":"reported","evidence":[{"locator":"On Tuesday, however, more Instagram users claimed to have had their accounts hacked.","relation":"supports","source_id":"s4"},{"locator":"who claimed to still be able to exploit Meta’s AI chatbot, and they were advertising apparently hacked handles for sale","relation":"supports","source_id":"s4"}],"assertion":"TechCrunch reported on 3 June 2026 that more Instagram users claimed to have had accounts hacked after Meta said the issue was resolved, and that members of a Telegram channel claimed they could still exploit the chatbot.","causal_attribution":"Claims by users and Telegram members as relayed by TechCrunch. The claims were not verified, and Meta's notice says the tool was disabled on 31 May 2026."}],"effects":[{"label":"A named security researcher reported that her Instagram password was changed without her knowledge and that she was logged out, and she told Reuters the account was reinstated in about five to ten minutes","claim_id":"c8","direction":"negative"},{"label":"The Instagram account of the U.S. Space Force's Chief Master Sergeant was reported compromised and briefly defaced with pro-Iranian content","claim_id":"c9","direction":"negative"},{"label":"Some account holders were reported locked out of their Instagram accounts, and one reported being unable to reach human support","claim_id":"c11","direction":"negative"},{"label":"Short Instagram handles were reported taken and offered for resale on Telegram","claim_id":"c12","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.maine.gov/cgi-bin/agviewerad/ret?loc=4169","kind":"regulatory_filing","access":"read","language":"en","translation_note":"Notice PDF read directly. Its text layer separates words with U+200B characters and detaches the first letter of some paragraphs, so locators from this source are given with those characters read as spaces.","independence_group":"meta-own-statements"},{"id":"s2","url":"https://web.archive.org/web/20260609035813id_/https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/686120c8-63be-4e3c-b7ed-466d65b672f5.html","kind":"official_record","access":"read","language":"en","translation_note":"","independence_group":"meta-own-statements"},{"id":"s3","url":"https://techcrunch.com/2026/06/01/hackers-hijacked-instagram-accounts-by-tricking-meta-ai-support-chatbot-into-granting-access/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s4","url":"https://techcrunch.com/2026/06/03/instagram-is-alerting-users-who-were-targeted-by-hackers-during-ai-chatbot-attacks/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s5","url":"https://www.404media.co/hackers-simply-asked-meta-ai-to-give-them-access-to-high-profile-instagram-accounts-it-worked/","kind":"news_report","access":"read","language":"en","translation_note":"Read through an Internet Archive capture of 1 June 2026 (20260601172133) because the live page is paywalled. The capture carries the full article.","independence_group":"attacker-posted-videos"},{"id":"s6","url":"https://krebsonsecurity.com/2026/06/hackers-used-metas-ai-support-bot-to-seize-instagram-accounts/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s7","url":"https://www.bbc.com/news/articles/c98rzr72dpyo","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s8","url":"https://www.theguardian.com/technology/2026/jun/01/meta-ai-hack-obama-sephora-instagram","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s9","url":"https://insideretail.us/how-the-sephora-instagram-hack-exposed-metas-ai-weakness/","kind":"wire_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s10","url":"https://gizmodo.com/hackers-tricked-meta-ai-into-handing-out-access-to-major-instagram-accounts-2000766087","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s11","url":"https://gizmodo.com/meta-says-thousands-of-instagram-accounts-were-breached-through-its-ai-support-assistant-2000768770","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"meta-own-statements"},{"id":"s12","url":"https://about.fb.com/news/2026/03/boosting-your-support-and-safety-on-metas-apps-with-ai/","kind":"official_statement","access":"read","language":"en","translation_note":"","independence_group":"meta-own-statements"}],"version":1,"ai_roles":["others_use","institutional_use"],"contexts":["privacy","everyday_life"],"unknowns":["How many people or organisations lost control of an account is not established. Meta's listing gives 20225 persons affected and the notice calls the Maine figure an upper bound, and the notice does not say how many accounts were organisational or how many were taken over.","Meta says it is unaware of what, if any, personal information was accessed. Whether any messages or data were read is unknown.","The start date rests on Meta's listing (17 April 2026), and the notice does not state its basis. 404 Media quotes a Telegram channel documenting the hack saying the exploits were 'getting abused after quietly working for months', and separately says that the same account originally posted in Telegram about the vulnerability 'at the end of March' (the year is not stated). Neither statement gives a start date for exploitation. Meta's announcement of 19 March 2026 says the support assistant was previewed 'in December' (year not stated in the passage) and that help with logging in was starting in select cases in the US and Canada, so no inspected source establishes the earliest date of exploitation.","The end date is Meta's date for disabling the tool (31 May 2026). TechCrunch reported unverified claims of continued exploitation on 3 June 2026.","The X posts, the Telegram videos and the Reddit complaints were not opened. Reporters' descriptions of them are used.","The notice does not say how many accounts were restored to their owners, and the listing shows 19 June 2026 as the date of consumer notification in a capture taken on 9 June 2026.","Figures of about 34,000 accounts targeted and a SimpliSafe account appeared only on an aggregator page that attributes the first figure to Meta without a citation and are not used."],"geography":{"basis":"Meta's notice to the Maine Attorney General counts 30 Maine users among those potentially impacted. The countries of the other affected people, the attackers (who reportedly used VPNs to appear in the target's location) and Meta's systems are not stated in the inspected sources, and the country of the named security researcher is not stated.","court_countries":[],"event_countries":[],"affected_person_countries":["US"]},"publication":{"basis":"Meta's notice to the Maine Attorney General (a PDF read directly) and the Maine listing (an archived capture) document Meta's own account of the exploited AI-assisted tool, the dates and the affected count. Nine news reports and Meta's March announcement were read in full. The mechanism claim has two independent chains (Meta's filing and attacker-posted videos checked by TechCrunch). Harm to named account holders rests on their own statements or on reporters relaying attacker-posted screenshots, so those claims stay at reported status. Only one account holder who spoke publicly is named. The office holder is described by office only.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"Meta's notice to the Maine Attorney General describes the affected system as an AI-assisted account recovery system (High Touch Support) and says it sent a password reset link to an email address not associated with the account. TechCrunch reports that no Meta employee or contractor took part in the exploit chats and checked one attacker mailbox for the code. Meta says the tool worked as intended, that the failure was a bug in a separate code path that did not verify the email address, and (to Gizmodo) that the failure was not due to the AI agent itself. Whether the AI component or the separate code path caused the failure is disputed and was not tested.","status":"supported"},"person_relations":["made_decision_about"]},"name":"Third parties exploit Meta's AI-assisted Instagram account recovery tool to reset passwords, with account takeovers reported (17 April to 31 May 2026)","summary":"Meta announced the rollout of its AI support assistant on Facebook and Instagram on 19 March 2026. Meta's filing with the Maine Attorney General (notice dated 5 June 2026) says unauthorized third parties exploited a vulnerability in its AI-assisted Instagram account recovery tool (High Touch Support) to receive password reset links for accounts they did not own, and the listing gives 17 April 2026 as the breach date and 31 May 2026 as the discovery date. Videos that attackers posted, as described by TechCrunch, 404 Media and Krebs on Security, show attackers asking the assistant in a chat to link a new email address to a target username. Reported victims include the security researcher Jane Manchun Wong, who posted that her password was changed without her knowledge, the Instagram account of the U.S. Space Force's Chief Master Sergeant, and the accounts of Sephora and a dormant Obama White House page (TechCrunch marks the last as disputed by Meta). Krebs and the BBC report pro-Iran defacement of some accounts, and TechCrunch reports that some victims were locked out and that short handles were offered for resale. The filing gives 20225 persons affected in total and 30 in Maine, and the notice calls the Maine figure an upper bound. Meta says the tool worked as intended, that a bug in a separate code path failed to check the email address, and (through a spokesperson to Gizmodo) that the failure was not due to the AI agent itself. Meta says it disabled the tool on 31 May 2026, the day it discovered the exploitation.","incidentDate":"2026-04-17","incidentEndDate":"2026-05-31","incidentKind":"bounded_series","incidentDatePrecision":"range","exposurePattern":"unknown","reportedDate":"2026-06-01","aiSystem":"Meta AI support assistant / High Touch Support (AI-assisted Instagram account recovery tool)","aiProduct":"Meta AI support assistant","aiCompany":"Meta","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm","reputational_harm"],"harmOutcomeSummary":"Reporters and Meta's notice report that third parties reset passwords on Instagram accounts and, where the account had no two-factor authentication, could log in. A named security researcher reports her password was changed without her knowledge and that reinstating the account took about five to ten minutes. Krebs on Security and the BBC report that some high-profile accounts were briefly defaced, TechCrunch reports that some victims were locked out and that short handles were offered for resale, and Meta says it does not know what personal information, if any, was accessed. Meta's filing gives 20225 persons affected in total, and its notice calls the Maine figure an upper bound.","frameworkFacets":[],"causationStatus":"disputed","participantUsersAffectedMin":0,"otherPeopleHarmedMin":2,"affectedCountStatus":"partial","affectedCountEvidence":"Two account holders are counted: the security researcher who posted that her account was taken over, and the office holder whose Instagram account TechCrunch and Krebs on Security report as compromised. TechCrunch's 3 June article says this account 'appeared to be' among the victims, no statement from the office holder or from Meta about this account was inspected, and whether it is a personal or an official account is not stated. Sephora and the Obama White House account are organisational or institutional accounts and are not counted. Other victims (everyday users, short-handle holders) are unquantified. Meta's listing of 20225 persons affected is not counted: the notice calls the Maine figure an upper bound and does not say how many accounts were taken over or how many were organisational.","victimAgeRange":"unknown","platformType":"assistant","primarySourceUrl":"https://www.maine.gov/cgi-bin/agviewerad/ret?loc=4169","primarySourceLabel":"Meta incident notification to the Maine Attorney General (5 June 2026)","firstPublishedAt":"2026-09-29T21:16:54.181323+00:00","updatedAt":"2026-09-30T01:17:45.477765+00:00","scopeVersion":"facts-v3","tags":["historical-2026"]},{"id":"2026-x-grok-reportedly-disclosed-adult-performer-legal-name-and-birthdate-in-reply-to-user","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"Porn performer Siri Dahl’s personal information, including her full legal name and birthday, was publicly exposed earlier this month by xAI’s Grok chatbot.","relation":"supports","source_id":"s1"},{"locator":"so someone on X replied, “Who is she? What is her name?” and tagged @grok to get an answer.","relation":"supports","source_id":"s1"},{"locator":"Grok provided her personal information unprompted; the user likely only wanted information on what performer appeared in the clip.","relation":"supports","source_id":"s1"},{"locator":"revealing her legal name and birth date to users","relation":"supports","source_id":"s2"},{"locator":"Since grok doxxed me in early Feb, AI scrapers have reproduced my legal name on hundreds more websites","relation":"supports","source_id":"s3"},{"locator":"I asked 404 to publish my legal name in this article.","relation":"supports","source_id":"s3"}],"assertion":"In early 2026 (early February according to 404 Media and the performer, possibly earlier according to Stern), in reply to an X user who asked who the performer in a clip was and what her name was and tagged Grok, Grok answered with the performer's stage name together with her birthdate and legal name. 404 Media describes the personal details as unprompted and says the user likely wanted only to know which performer appeared in the clip.","causal_attribution":"The 404 Media article shows a screenshot of the X reply that was not inspected as an image. Mashable relays 404 Media. The affected person's own post gives the same account and dates the reply to early February. Grok's own reply text is not quoted here because it contains the personal details."},{"id":"c2","status":"reported","evidence":[{"locator":"Almost instantly, harassers started opening Facebook accounts in her name and posting stolen porn clips with her real name on sites for leaking OnlyFans content.","relation":"supports","source_id":"s1"},{"locator":"There are a ton of Facebook accounts that come up that are pretending to be me, using my real name,","relation":"supports","source_id":"s1"},{"locator":"There are now porn leak sites that are posting porn of me using only my legal name, not even putting my stage name on it.","relation":"supports","source_id":"s1"},{"locator":"Users are now asking Grok for the make and model of Dahl’s car, her address, and other dangerous personal information.","relation":"supports","source_id":"s1"},{"locator":"Now, Dahl is having to call her family and put defensive plans in place.","relation":"supports","source_id":"s1"},{"locator":"AI scrapers have reproduced my legal name on hundreds more websites, many of which have wildly inaccurate claims","relation":"supports","source_id":"s3"}],"assertion":"After the disclosure the performer reports that impersonating Facebook accounts using her legal name appeared, that stolen clips of her were posted under her legal name on leak sites, and that her legal name was reproduced on hundreds of other websites, some with inaccurate claims about her. 404 Media reports that users asked Grok for the make and model of her car and her address without an accurate reply, and that she is calling family members to put defensive plans in place.","causal_attribution":"The Facebook accounts, leak-site posts and the family measures are the performer's statements as quoted by 404 Media and in her own post. The queries to Grok about her car and address are stated in 404 Media's own voice. The impersonating accounts, leak-site posts and Grok queries were not inspected. The timing (\"almost instantly\") is 404 Media's wording. No physical harm or threat is reported."},{"id":"c3","status":"reported","evidence":[{"locator":"Dahl has used the name ... since the beginning of her career in the adult industry in 2012.","relation":"supports","source_id":"s1"},{"locator":"information she'd protected until now.","relation":"supports","source_id":"s1"},{"locator":"I've been paying for data removal services for like, at least six years now","relation":"supports","source_id":"s1"}],"assertion":"The performer had used her stage name since 2012 and had paid for data removal services for at least six years to keep her legal name private.","causal_attribution":"The performer's own account as reported by 404 Media. Her data removal spending was not documented."},{"id":"c4","status":"disputed","evidence":[{"locator":"It stated that Dahl's legal name and birthdate are already public on the internet, which Dahl denied.","relation":"supports","source_id":"s2"},{"locator":"been getting a lot of replies and reposts from people on here and twitter saying \"your name was on a random facebook page since september!\"","relation":"supports","source_id":"s4"},{"locator":"and my *real* name was NEVER published on any verifiable source associated with my stage name.","relation":"contradicts","source_id":"s5"},{"locator":"\"My legal name only became public after you doxxed me, and now thanks to you it's been proliferated all over the internet by other AI scrapers","relation":"contradicts","source_id":"s2"},{"locator":"Dahl said she doesn’t know where Grok originally got her legal name from.","relation":"context","source_id":"s1"},{"locator":"Bei Googles KI-Zusammenfassungen wird der Name als nicht bekannt angegeben.","relation":"context","source_id":"s6"}],"assertion":"Whether the legal name was already publicly available before Grok's reply is disputed. Grok's reply to the performer said the details were already public, and people told her a Facebook page carried the name since September. The performer denies it and says the name was never published on a verifiable source tied to her stage name. Stern reports that Google's AI summaries list the name as unknown and that ChatGPT, Claude and Gemini each say they would not release it.","causal_attribution":"The pre-existing availability of the name was not established either way. The Facebook page and any earlier X post were not inspected. The September date comes from replies the performer relays, and the year is not stated."}],"effects":[{"label":"Legal name and birthdate of an adult performer disclosed by Grok on X, followed by reported impersonation accounts, leak-site posts under the legal name and defensive plans she is putting in place with family","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.404media.co/grok-doxing-real-names-birthdates-siri-dahl/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"404-media"},{"id":"s2","url":"https://mashable.com/article/siri-dahl-doxxed-by-grok","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"404-media"},{"id":"s3","url":"https://bsky.app/profile/siridahl.com/post/3mfa5dt66qs2h","kind":"social_post","access":"read","language":"en","translation_note":"","independence_group":"affected-person-posts"},{"id":"s4","url":"https://bsky.app/profile/siridahl.com/post/3mfio2pwq5c2l","kind":"social_post","access":"read","language":"en","translation_note":"","independence_group":"affected-person-posts"},{"id":"s5","url":"https://bsky.app/profile/siridahl.com/post/3mfip3jssec2y","kind":"social_post","access":"read","language":"en","translation_note":"","independence_group":"affected-person-posts"},{"id":"s6","url":"https://www.stern.de/digital/online/pornostar-hielt-ihren-namen-geheim---dann-plauderte-musks-ki-ihn-aus-37169054.html","kind":"news_report","access":"read","language":"de","translation_note":"German-language article read from an Internet Archive capture of 3 March 2026 (the direct request returned HTTP 403) and cited in English paraphrase. The quoted German passages are verbatim. No human translator checked the paraphrase.","independence_group":"stern"}],"version":1,"ai_roles":["others_use"],"contexts":["privacy","everyday_life"],"unknowns":["The date of Grok's reply within January and February 2026 is not fixed. 404 Media and the performer's 19 February post say early February, while a 23 February post refers to 'before Jan 20th' and stern.de says she found the reply weeks after it appeared.","The 404 Media page returned only its opening paragraphs to a direct request. The full text was read from an Internet Archive capture dated 19 February 2026, which may differ from later edits.","The original Grok reply, the screenshots, the impersonating Facebook accounts, the leak-site posts and the queries about her car and address were not inspected. The performer's Bluesky posts were read as text records, and her X posts only as quoted by Mashable.","Where Grok obtained the legal name is unknown. The performer says she does not know and wonders whether identity documents submitted to X for impersonation reports were the source, and no source read confirms or rules that out.","Whether the name was already published before the reply is disputed (claim c4). The earlier Facebook page and X post that people cited to her were not located or inspected.","No statement from xAI or X about the disclosure was found. 404 Media reports that X did not respond and Mashable reports that it asked the performer's representatives and xAI for comment.","The extent of the harassment beyond the performer's own statements, and whether the reported family measures were carried out, is not documented."],"geography":{"basis":"The inspected sources do not state where the performer lives or where the disclosure and harassment occurred. The disclosure happened on X, which is international. Grok's quoted description of the performer's nationality is not used as a location.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"The 404 Media article (full text via an archive capture), the Mashable article, three of the performer's Bluesky posts and the stern.de article were read. Mashable and stern.de relay 404 Media, and 404 Media and the performer's posts rest on her account, so the claims are reported and the prior-availability question is left disputed. The performer spoke publicly under her stage name, quoted by two outlets and in her own posts, and asked 404 Media to publish her legal name. The record names her and omits her legal name, birthdate and the pages that carry them.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"404 Media reports that Grok's reply on X to a user's question gave the performer's legal name and birthdate, and shows a screenshot that was not inspected as an image. Mashable quotes a further Grok reply to the performer on X (\"I'm sorry you're upset.\") that said the details were already public. Grok's source for the name is unknown. The performer suggests it may have come from identity documents X held, and stern.de says Grok denied having such access. No xAI statement was found.","status":"reported"},"person_relations":["made_claim_about","communicated_with"]},"name":"Grok reportedly disclosed an adult performer's legal name and birthdate in an X reply, followed by reported impersonation accounts and leak-site posts under the legal name","summary":"In early 2026 (404 Media and the performer's 19 February post say early February, while Stern reports she found the reply weeks after it appeared) an X user replied to a clip of adult performer Siri Dahl, asking who the performer was and what her name was, and tagged Grok. According to 404 Media, Grok answered with her stage name, her birthdate and her legal name, and the user likely wanted only to know which performer appeared in the clip. Dahl has used the stage name since 2012 according to 404 Media, and she says she had paid for data removal services for at least six years to keep the legal name private. She reports that impersonating Facebook accounts and leak-site posts under the legal name then appeared and that the name spread across hundreds of websites. 404 Media reports that users asked Grok for the make and model of her car and her address without an accurate reply, and that she is calling family members to put defensive plans in place. Grok's reply to her protest said the details were already public, which she denies. Where Grok obtained the name is unknown. Dahl spoke publicly about the event and asked 404 Media to publish her legal name. This record omits the legal name and birthdate.","incidentDate":"2026-01-01","incidentKind":"single_event","incidentDatePrecision":"year","exposurePattern":"unknown","reportedDate":"2026-02-19","aiSystem":"Grok (xAI chatbot on X)","aiProduct":"Grok","aiCompany":"xAI","severity":"medium","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["other_material_harm","exploitation_or_abuse"],"harmOutcomeSummary":"The performer told 404 Media and said in her own posts that after Grok's reply gave her legal name and birthdate, impersonating Facebook accounts and leak-site posts under the legal name appeared and her legal name was reproduced on hundreds of websites (some with inaccurate claims). 404 Media reports that users asked Grok for her car details and address without an accurate reply and that she is calling family members to put defensive plans in place. She says she had spent years and thousands of dollars on data removal services to keep the name private. No physical harm or threat is reported.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"exact","affectedCountEvidence":"One performer who spoke publicly about the disclosure is reported harmed. Family members are mentioned as people she is warning and are not reported harmed, and the X user who asked Grok is not counted.","victimAgeRange":"adult","platformType":"chatbot","primarySourceUrl":"https://www.404media.co/grok-doxing-real-names-birthdates-siri-dahl/","primarySourceLabel":"404 Media: 'Grok Exposed a Porn Performer's Legal Name and Birthdate' (19 Feb 2026)","firstPublishedAt":"2026-09-29T21:16:30.069014+00:00","updatedAt":"2026-09-30T01:17:59.169171+00:00","scopeVersion":"facts-v3","tags":["historical-2026"]},{"id":"2026-facebook-video-selfie-face-scan-failed-account-lockout-first-person","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'My 5-year-old account got hit with a random security check.'; 'The app asked for a video face scan, but it failed completely.'; 'my face and physical definition have changed a lot'; 'The AI simply didn't recognize me.'","relation":"supports","source_id":"s1"}],"assertion":"The poster's five-year-old Facebook account was put through a security check that asked for a video face scan, and the scan failed; the poster attributes this to changes in their appearance and says the AI did not recognise them.","causal_attribution":"Poster's account and attribution; no messages from Facebook were published."},{"id":"c2","status":"reported","evidence":[{"locator":"'Then it asked for ID.'; 'I use a shortened nickname on my profile for basic privacy'; 'the automated system instantly rejected my government ID for a name mismatch'","relation":"supports","source_id":"s1"}],"assertion":"Facebook then asked for ID, and an automated system rejected the poster's government ID because the profile uses a shortened nickname.","causal_attribution":"Poster's account; the post does not say the ID check used AI."},{"id":"c3","status":"reported","evidence":[{"locator":"'It’s pretty gutting.'; 'locked out of years of memories, friends, and active Marketplace listings'; 'a way to bypass the lock screen to download my archive data and photos'; 'hoping someone here has navigated this specific deadlock or found a way to reach a human'","relation":"supports","source_id":"s1"}],"assertion":"The poster says they are locked out of years of memories, friends and active Marketplace listings, describes the loss as gutting, and is seeking a way to reach a human reviewer or download their data.","causal_attribution":"Poster's own statement of the effect."},{"id":"c4","status":"documented","evidence":[{"locator":"'The user will upload a video selfie and we’ll use facial recognition technology to compare the selfie to the profile pictures on the account they’re trying to access.'","relation":"supports","source_id":"s2"}],"assertion":"Meta says that, when people verify their identity with a video selfie to regain access to a compromised account, it uses facial recognition technology to compare the selfie with the profile pictures on the account.","causal_attribution":"General product description by Meta; it does not establish how this check was decided."}],"effects":[{"label":"locked out of a five-year-old account with years of photos, contacts and active Marketplace listings","claim_id":"c3","direction":"negative"},{"label":"distress at the loss ('pretty gutting')","claim_id":"c3","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.reddit.com/r/facebook/comments/1wsrvdh/lost_my_5year_account_after_military_personal/","kind":"forum_post","access":"read","language":"en","translation_note":"Read in English on 2026-09-29: full self-text retrieved through the arctic_shift archive API by post ID. The poster handle is not recorded.","independence_group":"reddit-facebook-facescan-poster"},{"id":"s2","url":"https://about.fb.com/news/2024/10/testing-combat-scams-restore-compromised-accounts/","kind":"company_blog","access":"read","language":"en","translation_note":"Meta newsroom post first published 21 October 2024 with later updates, fetched 2026-09-29 (200). Describes the feature in general; it does not address this account.","independence_group":"meta-newsroom"}],"version":1,"ai_roles":["institutional_use"],"contexts":["everyday_life","privacy"],"unknowns":["The date of the security check and the poster's location.","Why the security check was triggered and whether a human reviewed the face scan or the ID.","Whether the poster regained access or obtained a data download."],"geography":{"basis":"The post says only 'Where I live' without naming a place; the comments add nothing. Unknown after review.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Published under the 2026-09-15 charter's public-forum rule as a concrete first-person account of a Facebook video face-scan security check, which the poster describes as AI, failing to recognise them and, with an ID rejection, locking them out of their account; described with attribution and without corroboration. Meta's own description of video-selfie verification is cited as context only. Personal circumstances the poster gives for their changed appearance are summarised, not reproduced. No handle is recorded.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"The poster says a video face scan in Facebook's security check failed and that 'The AI' did not recognise them. Meta's newsroom documents that video selfies used to recover compromised accounts are compared with profile pictures using facial recognition, without saying whether a human reviews the result or covering routine security checks; the ID rejection is attributed by the poster to an 'automated system' and is not established as AI.","status":"reported"},"person_relations":["made_decision_about"]},"name":"First-person forum account: a Facebook user says a video face-scan security check failed to recognise them after their appearance changed, an automated ID check then rejected their government ID over a nickname, and they were locked out of a five-year-old account","summary":"In a public post to r/facebook on 28 September 2026, a user writes that their five-year-old Facebook account was hit with a security check that asked for a video face scan, which 'failed completely'. They say their face had changed a lot through recent life circumstances and 'The AI simply didn't recognize me.' Facebook then asked for ID, and 'the automated system instantly rejected' their government ID because their profile uses a shortened nickname. The poster says they are locked out of years of memories, friends and active Marketplace listings and are looking for a way to reach a human or download their data. Meta has said that video selfies used to regain access to compromised accounts are compared with the account's profile pictures using facial recognition; whether this check worked that way is not known. The account is uncorroborated.","incidentKind":"single_event","incidentDatePrecision":"unknown","exposurePattern":"single_interaction","reportedDate":"2026-09-28","aiSystem":"Facebook's video face-scan security check (Meta describes video-selfie verification for account recovery as using facial recognition technology); the specific system is not named in the post","aiProduct":"Facebook video face-scan check","aiCompany":"Meta","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["other_material_harm","psychological_distress"],"harmOutcomeSummary":"The poster reports that a Facebook video face-scan check failed to recognise them and an automated ID check rejected their ID over a nickname, locking them out of a five-year-old account with years of photos, contacts and active Marketplace listings, which they describe as 'pretty gutting' (first-person account, uncorroborated).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person: the poster, locked out of their own account. Commenters describing their own lockouts are not counted. Exact 1.","victimAgeRange":"adult","jurisdiction":"unknown","platformType":"other","outcomeStatus":"ongoing","primarySourceUrl":"https://www.reddit.com/r/facebook/comments/1wsrvdh/lost_my_5year_account_after_military_personal/","primarySourceLabel":"r/facebook, 28 September 2026: public first-person post about a failed AI face scan and an ID rejected over a nickname (title shortened)","firstPublishedAt":"2026-09-29T03:21:50.784414+00:00","updatedAt":"2026-09-30T01:17:37.118566+00:00","scopeVersion":"facts-v3","tags":["first-person","reddit","facebook","meta","facial-recognition","video-selfie","account-lockout","identity-verification","made-decision-about"]},{"id":"2026-utah-meta-ai-suggested-prompts-children-profile","caseFacts":{"claims":[{"id":"c1","status":"corroborated","evidence":[{"locator":"'Meta AI posed a series of invasive prompts under the video, such as \"Who's the child passenger?\" and \"Where does Kalie Robins live?\"'; 'pulled information from her past posts ... including her location'; 'drew on other profiles, such as her mother's account'.","relation":"supports","source_id":"s1"},{"locator":"'Who's the child passenger?'; 'their names, birth information, pictures and videos of them'; 'It pieced together my information to show people where I live'.","relation":"supports","source_id":"s3"},{"locator":"'suggested questions aimed at uncovering information about her children — including their names, birthdates, videos, newborn photos, even photos that had been deleted — and, ultimately, her live location'.","relation":"supports","source_id":"s2"}],"assertion":"Meta AI suggested prompts under Robins's 1 September car video including 'Who's the child passenger?' and 'Where does Kalie Robins live?', and clicking them produced her daughters' names, birth details, photos and videos from her own and relatives' posts, and assembled her likely location.","causal_attribution":"Robins's account given in separate interviews to CNET, NewsNation and Futurism; Meta does not dispute that the prompts were generated."},{"id":"c2","status":"corroborated","evidence":[{"locator":"'A Meta spokesperson told CNET in an email that it \"fixed\" the issue and that Meta AI will no longer suggest inappropriate, personal questions on users' posts'.","relation":"supports","source_id":"s1"},{"locator":"'\"While the content was available to this user, these prompts should never have been generated,\" Meta spokesperson Dina El-Kassaby said, according to The Verge'.","relation":"supports","source_id":"s4"},{"locator":"'its AI search feature \"missed the mark\"'; '\"fixed that issue\"'.","relation":"supports","source_id":"s3"}],"assertion":"Meta said the prompts 'missed the mark' and 'should never have been generated', that responses draw only on information the user can already access, and that it fixed the issue so Meta AI no longer suggests personal questions about people in posts.","causal_attribution":"Meta statements to three outlets."},{"id":"c3","status":"disputed","evidence":[{"locator":"'Meta also denied Robins' claim that its AI accessed a photo deleted years ago. Instead, Meta told CNET that the photo of Robins' kids was deleted right before the video was made and that a temporary bug briefly kept it visible. Robins disputed this'.","relation":"supports","source_id":"s1"}],"assertion":"Robins says one surfaced photo had been deleted years earlier; Meta says the photo was deleted shortly before the video and remained briefly visible because of a temporary bug.","causal_attribution":"Competing accounts from Robins and Meta reported by CNET."}],"effects":[{"label":"Meta AI prompts compiled a mother's young daughters' names, birth details and photos and her likely location; the mother reported distress and lost trust; Meta changed the feature","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.cnet.com/tech/services-and-software/meta-ai-viral-video-personal-prompts-about-kids/","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-09-18 (CNET, 12 Sep 2026). Direct interview with Robins plus Meta's emailed statement to CNET and its dispute of the deleted-photo detail.","independence_group":"cnet"},{"id":"s2","url":"https://www.newsnationnow.com/business/tech/ai/mom-meta-ai-analyzing-posts-about-kids/","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-09-18 via the MSN content API copy (NewsNation, 17 Sep 2026; the newsnationnow.com host returns 403 to this box). Interview with Robins including the distress quotation.","independence_group":"newsnation"},{"id":"s3","url":"https://torontosun.com/news/world/utah-mom-sounds-alarm-after-meta-ai-digs-up-details-about-her-children-im-done","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-09-18 via the MSN content API copy (Toronto Sun, 15 Sep 2026). Relays Futurism's interview and Meta's statement to Futurism; treated as the Futurism chain.","independence_group":"futurism"},{"id":"s4","url":"https://www.dexerto.com/entertainment/meta-changes-ai-prompts-after-chatbot-asked-mother-to-identify-her-child-3408508/","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-09-18 (Dexerto, 12 Sep 2026). Relays The Verge's report of Meta spokesperson Dina El-Kassaby's statement; treated as The Verge chain.","independence_group":"verge"}],"version":1,"ai_roles":["own_use","institutional_use"],"contexts":["privacy","everyday_life","relationships"],"unknowns":["What Meta changed and how many other users saw similar prompts about children is not disclosed.","Whether the compiled information was shown to anyone other than Robins is not established.","No regulator has announced an inquiry in the inspected sources."],"geography":{"basis":"Robins is described as a Utah mother (Toronto Sun/Futurism; TRT Haber); the posts and prompts occurred on her US Instagram/Facebook accounts. No court.","court_countries":[],"event_countries":["US"],"affected_person_countries":["US"]},"publication":{"basis":"Published under the 2026-09-15 charter as a privacy and made-claim-about case: an AI feature compiled identifying details about two young children and a named adult's location, the adult reported distress and loss of control, and the company acknowledged the prompts should not have been generated. Four sources across four reporting chains read; the children's details are not reproduced. Low severity.","reviewed_on":"2026-09-18"},"ai_involvement":{"basis":"Meta acknowledged to CNET and The Verge that its AI generated the suggested prompts and that they 'should never have been generated', and said it fixed the issue. The AI made claims about identified people (the children's identities and the mother's location) rather than conversing with them; the mother's clicks on the prompts are recorded as own_use, and the platform's default feature as institutional_use.","status":"supported"},"person_relations":["made_claim_about"]},"name":"Utah: Meta AI's suggested prompts under a mother's Instagram video compiled her young daughters' names, birth details and old photos and her likely home location; Meta said the prompts 'missed the mark' and changed the feature","summary":"On 1 September 2026 Kalie Robins, a Utah travel creator, posted a short Instagram video of herself singing in the car with one of her daughters; it was also shown on Facebook. The next day she noticed Meta AI had placed suggested questions under the post, starting with 'Who's the child passenger?'. Clicking the prompts, she said, produced her two daughters' names, birth information, photos and videos drawn from her own and relatives' past posts, including a newborn photo from her mother's account and a picture she believed she had deleted years earlier, and a further prompt, 'Where does Kalie Robins live?', assembled older and newer posts into her likely location. Her 2 September reaction video drew more than 310,000 likes. Meta told reporters the prompts 'missed the mark', 'should never have been generated' and had been fixed, while saying the feature only surfaces information the user can already access; it disputed that a long-deleted photo was used, saying the photo had been deleted shortly before the video and remained briefly visible through a bug. Robins said Meta never contacted her and that the episode left her feeling she had 'failed' her children.","incidentDate":"2026-09-02","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"single_interaction","reportedDate":"2026-09-10","aiSystem":"Meta AI (suggested-question prompts under Instagram and Facebook posts, drawing on the user's and related accounts' content)","aiProduct":"Meta AI","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["psychological_distress"],"harmOutcomeSummary":"A mother experienced distress and a loss of control over her children's privacy after Meta AI's suggested prompts compiled her two young daughters' identifying details and her likely location from scattered family posts; Meta acknowledged the prompts should not have been generated and changed the feature.","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":1,"otherPeopleHarmedMin":2,"affectedCountStatus":"exact","affectedCountEvidence":"Kalie Robins (who used the prompts and reported distress) and her two daughters, whose identifying details were compiled. Exact count of three; her mother and other relatives whose posts were drawn on are not counted as harmed.","victimAgeRange":"minor","jurisdiction":"US","platformType":"assistant","outcomeType":"internal_action","outcomeStatus":"resolved","primarySourceUrl":"https://www.cnet.com/tech/services-and-software/meta-ai-viral-video-personal-prompts-about-kids/","primarySourceLabel":"CNET, 12 Sep 2026: Mother calls for 'accountability' after Meta AI mines family posts for info on minors (interview with Kalie Robins; Meta statement)","firstPublishedAt":"2026-09-18T03:25:15.671921+00:00","updatedAt":"2026-09-30T01:17:58.137201+00:00","scopeVersion":"facts-v3","tags":["meta-ai","instagram","facebook","privacy","children","profiling","suggested-prompts","united-states","utah","made-claim-about"]},{"id":"2017-simsimi-ireland-cyberbullying","caseFacts":{"claims":[{"id":"c1","status":"corroborated","evidence":[{"locator":"'Several schools have sent letters or text messages to parents in recent days asking them to discuss use of the SimSimi app with their children.'; 'SimSimi is the most downloaded app in Ireland on Apple's iTunes charts and the second most-downloaded app on the Google Play store.'; 'One Dublin secondary school told parents this weekend that the app allowed individuals to be targeted easily.'","relation":"supports","source_id":"s2"},{"locator":"'Where schools were aware of this use by some pupils, they alerted parents of potential dangers. General alerts were also issued by many teachers and schools through social media.'","relation":"supports","source_id":"s4"},{"locator":"'said it was being downloaded \"in huge numbers\" across Ireland last week.'; 'we began to put out warnings through the media to parents and to schools'","relation":"supports","source_id":"s5"}],"assertion":"In late March 2017 schools in the Republic of Ireland sent letters or text messages asking parents to discuss the SimSimi app with their children, while the app topped Apple's download chart in Ireland.","causal_attribution":"School messages quoted by The Irish Times, a teachers' union statement to TheJournal.ie and a DCU anti-bullying centre director's BBC interview."},{"id":"c2","status":"corroborated","evidence":[{"locator":"'allows users to view anonymous, and often insulting, messages left about them by typing in their name.'; 'When a user sends a message on their phone, the app responds by scanning for related conversations in its database and responds by spitting out a relevant response.'","relation":"supports","source_id":"s1"},{"locator":"'In practice, a small group could make a range of comments about a person and, without that person able to stop it, their name could be associated with negative and abusive content.'","relation":"supports","source_id":"s4"},{"locator":"'IBTimes UK downloaded and tested the application. The exchange quickly turned weird.'; 'Time for another name. Typing Suzanne was met with: \"is gay\" and the name Emily brought up: \"Slut, who needs to improve her grades big time!!\"'","relation":"supports","source_id":"s7"},{"locator":"'It appears to be a computer generated chat room where you talk to a very abusive computer!'; 'The app is rated as 17+ but I am twice that age and was really shocked at some of the stuff that came back!'","relation":"supports","source_id":"s5"}],"assertion":"The app answers typed text, including a person's name, with replies other users have taught it, so that a name can return insulting messages; journalists and police who tested it received abusive replies.","causal_attribution":"The Irish Times's description of the mechanism, IBTimes UK's own test and the PSNI Down Facebook post quoted by the BBC."},{"id":"c3","status":"reported","evidence":[{"locator":"'One parent who said that she had seen \"vile comments\" about her daughter on the app told TheJournal.ie that the company had said it would take 15 days to deal with her request but offered three alternative methods whereby words could be deleted from the system if they had become associated with vile language.'","relation":"supports","source_id":"s3"},{"locator":"'We did some searches for our kids names and there were some vile, vile comments on the names for each of our respective children'; 'went into her phone to see if she’d ever downloaded the app on the app store and luckily she hadn’t. It was a really stressful situation.'; 'The mother was told she’d have to wait 15 days for action to be taken when she complained about this to SimSimi.'","relation":"supports","source_id":"s4"}],"assertion":"A parent told TheJournal.ie that she and other parents searched their children's names on the app and found vile comments on each, that her daughter did not know of the comments; she said her daughter had not downloaded the app, that the company said it would take 15 days to deal with her request while offering ways to delete words, and that it was a really stressful situation.","causal_attribution":"The parent's own account to TheJournal.ie, carried in two articles; the company's reply is as she described it."},{"id":"c4","status":"reported","evidence":[{"locator":"'In primary school, students were getting messages when they put in their name and they couldn’t understand where that had come from'; 'students were being insulted about being too fat or too ugly and very personal things, things they might only know about each other.'; 'For one friend, at the beginning it was all fine and inside jokes, but within a couple of days every time he looked up his name, something mean was being said. It hurt him a lot and he became very down.'","relation":"supports","source_id":"s5"}],"assertion":"A Dublin secondary teacher told the BBC that primary pupils typing in their names received messages insulting them about being too fat or too ugly and about personal things, and her 15-year-old son said that for one friend, within a couple of days, every time he looked up his name something mean was being said, which hurt him a lot and left him very down.","causal_attribution":"The teacher's and her son's accounts to the BBC; the son describes a friend's experience."},{"id":"c5","status":"reported","evidence":[{"locator":"'When you say my name on SimSimi, ‘autism’ comes up . . . people are so unfunny and cruel when hiding behind a phone screen'","relation":"supports","source_id":"s2"}],"assertion":"A student wrote on social media that \"autism\" comes up when their name is said on SimSimi.","causal_attribution":"A student's social media post quoted by The Irish Times."},{"id":"c6","status":"corroborated","evidence":[{"locator":"'any message sent to it is now responded to with the message: “I do not talk in Ireland for a while”.'","relation":"supports","source_id":"s3"},{"locator":"'No matter what you asked it from Wednesday onwards, however, you got the same response: “I do not talk in Ireland for a while”.'","relation":"supports","source_id":"s4"},{"locator":"'This afternoon, users were greeted with a message stating: \"I do not talk in Ireland for a while.\"'","relation":"supports","source_id":"s1"},{"locator":"'has been suspended in the Republic of Ireland, but children in Northern Ireland can still download it.'","relation":"supports","source_id":"s5"},{"locator":"'was restricted in the Republic of Ireland (RoI) last week (Wednesday 29 March)'","relation":"supports","source_id":"s7"}],"assertion":"From Wednesday 29 March 2017 the app answered users in Ireland with \"I do not talk in Ireland for a while\", while it remained available in Northern Ireland.","causal_attribution":"TheJournal.ie's and The Irish Times's own observations of the app's reply, the BBC's report of the suspension, and IBTimes UK's report of the date; the date rests on TheJournal.ie's 'from Wednesday onwards' (29 March 2017), a Webwise tweet of 29 March embedded by TheJournal.ie and IBTimes UK's 'Wednesday 29 March'."},{"id":"c7","status":"reported","evidence":[{"locator":"'On its Facebook page, PSNI Down said it was unusual for police to highlight apps, but the SimSimi app gave them \"cause for concern\".'; 'We have reported it to the App Store and will include it in our Internet Safety talks'; 'It has asked parents to remove the app from their children'","relation":"supports","source_id":"s5"},{"locator":"'On the PSNI Down Facebook page, a warning said the app was a \"cause for concern\".'","relation":"supports","source_id":"s7"}],"assertion":"The PSNI's County Down Facebook page posted that the app gave it cause for concern, describing abusive and explicit replies, and said it had reported the app to the App Store; a school in Northern Ireland asked parents to remove the app from their children's phones and another urged pupils to remove it.","causal_attribution":"A police Facebook post quoted by the BBC and IBTimes UK; no formal police action is reported."},{"id":"c8","status":"reported","evidence":[{"locator":"'\"I think they have a duty of care of suspend the service for all young people,\" says Liam Hackett of anti-bullying campaign Ditch the Label.'; 'We got 5,000 signatures on a petition'; 'ISMaker, the South Korean company behind the app, have not responded to requests for comment.'","relation":"supports","source_id":"s6"},{"locator":"'The South Korean company that developed SimSimi did not respond to requests for comment on Sunday.'","relation":"supports","source_id":"s1"}],"assertion":"Anti-bullying campaigners called for the service to be suspended for young people; a campaigner in Ireland said a petition had gathered 5,000 signatures; the developer, named as ISMaker, did not respond to requests for comment.","causal_attribution":"Campaigners' statements to BBC Newsbeat; the non-response is each outlet's own report."}],"effects":[{"label":"children's names returned insulting replies that other users had taught the app, and primary pupils received personal insults when they typed in their names","claim_id":"c4","direction":"negative"},{"label":"a pupil was hurt and became very down after finding something mean every time he looked up his name","claim_id":"c4","direction":"negative"},{"label":"a parent found vile comments attached to her daughter's name and was told her complaint would take 15 days to handle","claim_id":"c3","direction":"negative"},{"label":"a student found that an insult came up when their name was said on the app","claim_id":"c5","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.irishtimes.com/news/education/simsimi-app-linked-to-bullying-suspends-access-to-irish-users-1.3029753","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-10-07 from the live page (HTTP 200), dated Thu 30 March 2017, by the paper's education editor.","independence_group":"irish-times"},{"id":"s2","url":"https://www.irishtimes.com/news/education/schools-warn-of-bullying-linked-to-simsimi-app-1.3025437","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-10-07 from the live page (HTTP 200), dated Sun 26 March 2017; quotes school messages to parents and students' social media posts.","independence_group":"irish-times"},{"id":"s3","url":"https://www.thejournal.ie/simsimi-offline-ireland-3314458-Mar2017/","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-10-07 from the live page (HTTP 200), dated 30 March 2017; includes a parent's account to TheJournal.ie and a CyberSafe Ireland interview given to Newstalk Breakfast.","independence_group":"thejournal"},{"id":"s4","url":"https://www.thejournal.ie/simsimi-explainer-3315369-Apr2017/","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-10-07 from the live page (HTTP 200), dated 2 April 2017; expands the same parent's account and quotes a teachers' union spokesperson.","independence_group":"thejournal"},{"id":"s5","url":"https://www.bbc.com/news/uk-northern-ireland-39453542","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-10-07 from the live page (HTTP 200), dated 31 March 2017; BBC News Northern Ireland, with interviews of a Dublin teacher and her son, a DCU centre director and a Northern Ireland principal, and the PSNI Down Facebook post.","independence_group":"bbc"},{"id":"s6","url":"https://www.bbc.com/news/newsbeat-39453778","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-10-07 from the live page (HTTP 200), dated 31 March 2017; BBC Newsbeat, with campaigners' statements.","independence_group":"bbc"},{"id":"s7","url":"https://www.ibtimes.co.uk/what-simsimi-look-chatbot-application-accused-enabling-cyberbullying-1615112","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-10-07 from the live page (HTTP 200), dated 3 April 2017; the reporter's own test of the app plus relays of the BBC and TheJournal.ie.","independence_group":"ibtimes"}],"version":1,"ai_roles":["others_use","own_use"],"contexts":["education","relationships","everyday_life"],"unknowns":["Whether or when SimSimi restored access for users in Ireland, and whether it changed its moderation; the stored claim that the app was later restored with content moderation was not supported by any inspected source and has been removed.","Who taught the app the insults, and how many children were targeted; CyberSafe Ireland and the teachers' union describe use for bullying without a count.","Whether the student quoted by The Irish Times is the same person as either counted child.","Whether the pupil described to the BBC attended school in the Republic of Ireland or Northern Ireland; the teacher interviewed teaches in Dublin.","Whether any formal police action followed the PSNI Down Facebook warning; the stored wording 'formal warnings' is not supported."],"geography":{"basis":"The Irish Times places the school warnings in the Republic of Ireland and quotes a Dublin school; the BBC's teacher interviewee teaches in Dublin and the parent spoke to an Irish outlet about Irish schools. The BBC also reports warnings by schools and police in Northern Ireland (GB), but no harmed person is described there, so GB is not recorded as an event or affected country. No court is involved.","court_countries":[],"event_countries":["IE"],"affected_person_countries":["IE"]},"publication":{"basis":"Published as a core case (communicated_with and made_claim_about). The Irish Times, TheJournal.ie, the BBC and IBTimes UK describe the SimSimi app returning insulting, user-taught replies when children's names were typed in, in Irish schools in March 2017; a parent's account and a teacher's account describe two children harmed, and the developer suspended Irish access on 29 March 2017. The insults themselves were taught by other users, which the record states. No child, parent, teacher or campaigner is named here.","reviewed_on":"2026-10-07"},"ai_involvement":{"basis":"The app's own output is the abuse. The Irish Times (26 and 30 March 2017) describes SimSimi as responding to a typed message by scanning related conversations in its database and returning a response, and as returning anonymous, often insulting, messages when a user types in a name. IBTimes UK's reporter typed ordinary first names and received abusive replies, and the PSNI's County Down page described the replies it received as abusive and explicit (BBC). A Dublin teacher told the BBC that primary pupils were getting insulting messages when they put in their names and that a pupil found something mean every time he looked up his name, which hurt him and left him very down; a parent told TheJournal.ie the app returned vile comments for her daughter's name. The insults were authored by other users who taught the app, and no source says the app composed novel abuse; the app's matching of a child's name to that taught content and its delivery to whoever typed the name is the described AI action connected to the harm.","status":"reported"},"person_relations":["communicated_with","made_claim_about"]},"name":"Ireland, March 2017: SimSimi chatbot returned user-taught insults for schoolchildren's names; schools warned parents and the app suspended Irish access","summary":"In late March 2017 the SimSimi chatbot app, which answers typed text with replies other users have taught it, topped Irish download charts while schools in the Republic of Ireland sent letters and text messages warning parents that pupils' names were being linked to insulting replies (The Irish Times, 26 March 2017). A parent told TheJournal.ie that she and other parents had searched their children's names and found vile comments on each, and that the company said her request would take 15 days to handle. A Dublin secondary teacher told the BBC that primary pupils who typed in their names received personal insults, and that a friend of her 15-year-old son found something mean every time he looked up his name, which hurt him a lot and left him very down. Police in County Down posted a warning on Facebook. From 29 March 2017 the app answered users in Ireland with \"I do not talk in Ireland for a while\", while remaining available in Northern Ireland. The South Korean developer did not respond to the outlets' requests for comment, and no inspected source says whether access was later restored.","incidentDate":"2017-03-01","incidentKind":"bounded_series","incidentDatePrecision":"month","exposurePattern":"repeated_interactions","reportedDate":"2017-03-26","aiSystem":"SimSimi, an anonymous chatbot app developed in South Korea that answers typed text, including people's names, with replies other users have taught it","aiProduct":"SimSimi","aiCompany":"ISMaker","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["psychological_distress","exploitation_or_abuse"],"harmOutcomeSummary":"Children whose names were typed into the app received insulting replies that other users had taught it. A parent told TheJournal.ie she found vile comments attached to her daughter's name, and a Dublin teacher told the BBC that a friend of her 15-year-old son was hurt and became very down after finding something mean every time he looked up his name. No clinical or physical outcome is reported.","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":1,"otherPeopleHarmedMin":1,"affectedCountStatus":"partial","affectedCountEvidence":"Participant user 1: a friend of a Dublin teacher's 15-year-old son, who looked up his own name on the app and found something mean each time, which the son said hurt him a lot and left him very down (BBC News, 31 March 2017). Other person 1: a parent's teenage daughter whose name returned vile comments; the parent said the daughter had not downloaded the app and did not know of the comments, so she is counted for the abuse attached to her name, not for distress (TheJournal.ie, 30 March and 2 April 2017). The two are distinct (a boy and a girl). A student who wrote that \"autism\" comes up when their name is said on the app (The Irish Times, 26 March 2017) may overlap with either and is not counted separately. Primary pupils who received insults (BBC) and the children the teachers' union and CyberSafe Ireland described are not counted. Partial: counted people plus further targeted children without a count.","victimAgeRange":"minor","jurisdiction":"IE","platformType":"chatbot","outcomeType":"internal_action","outcomeStatus":"resolved","primarySourceUrl":"https://www.irishtimes.com/news/education/simsimi-app-linked-to-bullying-suspends-access-to-irish-users-1.3029753","primarySourceLabel":"The Irish Times, 30 March 2017: SimSimi app linked to bullying suspends access to Irish users","firstPublishedAt":"2026-01-12T00:34:12.606519+00:00","updatedAt":"2026-10-07T03:29:54.147244+00:00","scopeVersion":"facts-v3","tags":["simsimi","cyberbullying","minor","ireland","schools","harassment","trainable-ai","historical","communicated-with"]}]}