{"meta":{"exportedAt":"2026-09-30T07:16:36.327Z","formatVersion":2,"selection":{"q":"meta","system":"","harm":"","context":"","country":"","role":"","relation":"contextual","evidence":"","year":"2026","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":3,"coverage":{"cases":3,"countries":1,"languages":1,"unknownLocation":1,"locationPending":0,"unknownLanguage":0,"unknownDate":0,"lawsuits":0,"regulatory":0,"minors":1,"coreRelations":0,"contextualRelations":3,"mixedRelations":0,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2026-meta-instagram-ai-assisted-account-recovery-tool-exploited-to-reset-passwords","caseFacts":{"claims":[{"id":"c1","status":"corroborated","evidence":[{"locator":"the system incorrectly sent a password reset link to that unassociated email rather than rejecting the request","relation":"supports","source_id":"s1"},{"locator":"This allowed unauthorized third parties to receive a password reset link for accounts they did not own","relation":"supports","source_id":"s1"},{"locator":"The chatbot can be seen sending a verification code to the email address provided by the hacker","relation":"supports","source_id":"s3"},{"locator":"TechCrunch was able to verify that the hacker’s public email mailbox, which was displayed in the video, effectively received the verification code.","relation":"supports","source_id":"s3"}],"assertion":"Through Meta's AI-assisted account recovery support system (High Touch Support), third parties received password reset links or verification codes for Instagram accounts they did not own, sent to an email address that was not associated with the account.","causal_attribution":"Two evidential bases: Meta's own notice to the Maine Attorney General (a party's account of its own system) and videos the attackers posted, in which TechCrunch confirmed that the mailbox shown received the verification code. TechCrunch's check covers that one delivery. It did not test which Meta tool sent the code or who owned the target account, and the videos were not opened for this review. The link between the chat assistant in the videos and High Touch Support is made by press reports and by Meta's spokesperson referring to the AI agent. No inspected document names both. Meta says the tool worked as intended and the failure lay in a separate code path (see c5), so the AI component's own contribution is disputed."},{"id":"c2","status":"reported","evidence":[{"locator":"the hacker opened a chat with Meta AI Support Assistant and asked the bot to add a new email address to the target’s account.","relation":"supports","source_id":"s3"},{"locator":"which prompts the chatbot to show a button to “Reset Password.”","relation":"supports","source_id":"s3"},{"locator":"One video shows a hacker starting a conversation with Meta’s AI support bot and asking it to link the target account with a new email address","relation":"supports","source_id":"s5"},{"locator":"using a VPN connection with an IP address that is in or near the target’s usual hometown","relation":"supports","source_id":"s6"},{"locator":"The bot followed through with the request - sending a code to the hacker's email which, when verified, was followed by an email with a link to change their password.","relation":"supports","source_id":"s7"}],"assertion":"Attackers asked Meta's AI support assistant in a chat to add or link a new email address to a target Instagram username, and some used a VPN to appear in the target's location. In one video the assistant then sent a verification code to that address and showed a button to reset the password.","causal_attribution":"Every account of the chat steps traces to videos and screenshots the attackers posted on Telegram and X. TechCrunch checked one displayed mailbox. The other videos were not independently reproduced."},{"id":"c3","status":"reported","evidence":[{"locator":"the unauthorized party was able to log in to the account if the account holder had not enabled two-factor authentication (2FA)","relation":"supports","source_id":"s1"},{"locator":"The hackers who released the video on Telegram said their exploit failed to work against any accounts that had MFA enabled.","relation":"supports","source_id":"s6"}],"assertion":"Meta's notice says the account could be logged into after the password reset if the account holder had not enabled two-factor authentication. Krebs on Security reports that the attackers who posted the video said the exploit failed against accounts with multi-factor authentication.","causal_attribution":"Meta's statement about its own system and the attackers' own statement as relayed by Krebs. Neither was tested independently."},{"id":"c4","status":"reported","evidence":[{"locator":"it can also take action for you on a growing set of requests directly within Facebook and in the future, on Instagram, including:","relation":"supports","source_id":"s12"},{"locator":"Resetting passwords","relation":"supports","source_id":"s12"},{"locator":"We’ve also started rolling out the support assistant to people who need help logging into their Facebook and Instagram accounts, starting with select cases in the US and Canada","relation":"supports","source_id":"s12"}],"assertion":"Meta announced the Meta AI support assistant for Facebook and Instagram on 19 March 2026, described it as able to take action on requests including resetting passwords directly within Facebook and, in the future, on Instagram, and said it had started rolling it out to people who need help logging into Facebook and Instagram accounts, starting with select cases in the US and Canada.","causal_attribution":"Meta's own product announcement. The announcement does not say which tool the exploited flow used. The link between this assistant and the High Touch Support tool named in Meta's notice is made by the press reports and by the notice's own description of an AI-assisted account recovery system."},{"id":"c5","status":"disputed","evidence":[{"locator":"The tool itself worked properly and functioned as intended; however due to a bug in a separate code path, the system did not properly verify that the email address provided by the individual requesting a password reset matched the email address associated with that user’s Instagram account.","relation":"supports","source_id":"s1"},{"locator":"Some of our internal backend checks failed in this instance, but it wasn’t due to the AI agent itself, and we’ve addressed the underlying cause.","relation":"supports","source_id":"s11"},{"locator":"Hackers simply told Meta’s AI chatbot that they were the owners of the target’s account, and asked the bot to link that person’s account to an email they controlled. The chatbot complied with the request","relation":"contradicts","source_id":"s4"}],"assertion":"Whether the failure lay in the AI agent or in a separate code path is disputed. Meta's notice says the tool worked as intended and that a bug in a separate code path did not check the requester's email address against the account, and a Meta spokesperson told Gizmodo that some internal backend checks failed and that this was not due to the AI agent itself. TechCrunch describes the chatbot as complying with the attackers' request.","causal_attribution":"Meta's account of its own system. TechCrunch's description of the chatbot as complying with the request is a reporter's characterisation from the attackers' videos and does not test where in Meta's system the check failed."},{"id":"c6","status":"reported","evidence":[{"locator":"Date(s) Breach Occured: 04/17/2026","relation":"supports","source_id":"s2"},{"locator":"Date Breach Discovered: 05-31-2026","relation":"supports","source_id":"s2"},{"locator":"May 31, 2026, Meta discovered that there was a vulnerability in an AI-assisted account","relation":"supports","source_id":"s1"},{"locator":"same day the exploitation was identified by Meta, the following actions were taken to","relation":"supports","source_id":"s1"},{"locator":"the AI-assisted support tool removing the vulnerable code path from production","relation":"supports","source_id":"s1"}],"assertion":"Meta's notice lists 17 April 2026 as the date the breach occurred (as 04/17/2026) and 31 May 2026 as the date it discovered the vulnerability, and says Meta disabled the AI-assisted support tool on the same day the exploitation was identified.","causal_attribution":"Meta's own dates for its own system. The notice letter gives the discovery date and no start date. The 17 April date appears only in the listing form, and the basis for it is not stated."},{"id":"c7","status":"reported","evidence":[{"locator":"Total number of persons affected (including residents): 20225","relation":"supports","source_id":"s2"},{"locator":"Total number of Maine residents affected: 30","relation":"supports","source_id":"s2"},{"locator":"reset through the support tool, did not have 2FA enabled on their account and whose Instagram accounts were likely accessed by an unauthorized party.","relation":"supports","source_id":"s1"},{"locator":"This number represents an upper bound of the users impacted as some of the accounts may have been accessed legitimately by account owners.","relation":"supports","source_id":"s1"}],"assertion":"The Maine Attorney General listing of Meta's submission gives 20225 as the total number of persons affected and 30 as the number of Maine residents. The notice defines the Maine figure as users whose passwords were reset through the tool, who had no two-factor authentication and whose accounts were likely accessed by an unauthorized party, and calls it an upper bound because some accounts may have been accessed legitimately by their owners.","causal_attribution":"Meta's own estimate. The notice's upper-bound wording is written for the Maine figure. The inspected notice does not say whether the total of 20225 counts accounts or people, how many were taken over, or how many are organisational accounts."},{"id":"c8","status":"reported","evidence":[{"locator":"“The password got changed without my knowledge and I was getting different password reset attempts throughout yesterday,” said Wong.","relation":"supports","source_id":"s3"},{"locator":"And I got repeatedly logged out from the IG iOS app[.] Quite concerning.","relation":"supports","source_id":"s10"},{"locator":"it took about five to 10 minutes to reinstate her account","relation":"supports","source_id":"s9"},{"locator":"Wong, who previously worked at Meta as a security engineer, said in a post on X her Instagram password was \"changed without my knowledge\"","relation":"supports","source_id":"s7"}],"assertion":"Jane Manchun Wong, a security researcher and former Meta employee, posted on X that her Instagram password was changed without her knowledge, that she received password reset attempts and was repeatedly logged out of the app, and told Reuters that reinstating her account took about five to ten minutes.","causal_attribution":"Her own public statements, relayed by four outlets. The X post itself was not opened. Wong does not say in the quoted statements how her account was accessed, and the outlets connect it to the exploit."},{"id":"c9","status":"reported","evidence":[{"locator":"and the account of the U.S. Space Force’s chief master sergeant","relation":"supports","source_id":"s4"},{"locator":"the account of the U.S. Space Force’s chief master sergeant","relation":"supports","source_id":"s3"},{"locator":"the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend","relation":"supports","source_id":"s6"},{"locator":"the Chief Master Sergeant of Space Force’s account","relation":"supports","source_id":"s5"}],"assertion":"TechCrunch and Krebs on Security report that the Instagram account of the U.S. Space Force's Chief Master Sergeant was compromised, and Krebs reports that it was briefly defaced with pro-Iranian images and messages.","causal_attribution":"Reporters' accounts based on screenshots the attackers posted. The account holder is not quoted in the inspected sources and is described here by office only. Whether the account is a personal or an official office account is not stated."},{"id":"c10","status":"reported","evidence":[{"locator":"including the Barack Obama White House account , the Chief Master Sergeant of Space Force’s account , and Sephora’s account","relation":"supports","source_id":"s5"},{"locator":"The Sephora corporate page and the account belonging to the Chief Master Sergeant of the U.S. Space Force were also hit.","relation":"supports","source_id":"s10"},{"locator":"The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced","relation":"supports","source_id":"s6"},{"locator":"The former US president's account reportedly posted pro-Iran content before it was recovered.","relation":"supports","source_id":"s7"},{"locator":"the dormant Obama White House account (which Meta disputed)","relation":"context","source_id":"s4"}],"assertion":"Outlets named the Sephora corporate account and a dormant Obama White House account among the compromised accounts, and Krebs and the BBC report that the Obama White House account was defaced with pro-Iran content. TechCrunch's 3 June report lists the Obama White House account among apparent victims with the parenthetical '(which Meta disputed)'. Both are organisational or institutional accounts and are not counted as affected persons.","causal_attribution":"Reporters' accounts. The Guardian, Gizmodo and Reuters name Sephora on the strength of 404 Media's reporting, so Sephora rests on one chain. TechCrunch does not say what Meta disputed about the Obama White House account. The BBC reports that Meta's spokesperson called claims that world leaders' accounts were hacked totally false."},{"id":"c11","status":"reported","evidence":[{"locator":"allowing the hacker to reset the target account’s password and take control of the account — in some cases locking out the victims.","relation":"supports","source_id":"s4"},{"locator":"locking users out of their accounts and prompting a wave of complaints on platforms including X and Reddit.","relation":"supports","source_id":"s9"},{"locator":"One X user wrote that they had been unable to find \"human support\" after their Instagram account was hacked.","relation":"supports","source_id":"s7"},{"locator":"Everyday users complained of similar hijackings on Reddit and X over the weekend.","relation":"supports","source_id":"s8"}],"assertion":"Some victims were reported locked out of their accounts, and one person wrote on X that they could not find human support after their Instagram account was hacked.","causal_attribution":"Reporters' summaries of complaints on X and Reddit. The individual posts were not opened and the complainants are not identified."},{"id":"c12","status":"reported","evidence":[{"locator":"TechCrunch has seen examples of allegedly hacked handles featuring common forenames or names of countries","relation":"supports","source_id":"s4"},{"locator":"(It’s important to note that it’s hard to know for sure if all these accounts were hacked due to the same technique.)","relation":"supports","source_id":"s4"},{"locator":"hijack a number of valuable (read: short) Instagram account names that allegedly have a resale value of more than a half million dollars.","relation":"supports","source_id":"s6"},{"locator":"404 Media has seen text files of huge lists of “OG,” or high-value, original usernames","relation":"context","source_id":"s5"}],"assertion":"Short Instagram handles were reported taken in the campaign and offered for resale. TechCrunch saw examples of allegedly hacked handles being advertised for sale and notes it is hard to know whether all were taken with this technique. Krebs reports that the attackers claimed the resale value of the short handles they took exceeded half a million dollars.","causal_attribution":"The resale and value claims come from attackers' Telegram posts as relayed by TechCrunch and Krebs. No sale was confirmed and the owners are not identified."},{"id":"c13","status":"reported","evidence":[{"locator":"\"This issue has been resolved and we are securing impacted accounts,\" Meta spokesperson Andy Stone told users in a statement on X","relation":"supports","source_id":"s7"},{"locator":"On Monday, Instagram spokesperson Andy Stone said in a reply to Wong’s post and others that the issue was now fixed.","relation":"supports","source_id":"s3"},{"locator":"Invalidated all existing password reset links that had been generated through the vulnerable path","relation":"supports","source_id":"s1"},{"locator":"potentially affected accounts into a mandatory security checkpoint requiring authentication before any account access","relation":"supports","source_id":"s1"},{"locator":"impacted users to reset their passwords and re-authenticate through secure, verified channels","relation":"supports","source_id":"s1"}],"assertion":"A Meta spokesperson said on X on 1 June 2026 that the issue was resolved and Meta was securing impacted accounts. Meta's notice says that it disabled the tool, invalidated existing password reset links generated through the vulnerable path, enrolled potentially affected accounts in a mandatory security checkpoint and told impacted users to reset their passwords.","causal_attribution":"Meta's statements about its own response. TechCrunch reports that the response did not end the reports (see c14)."},{"id":"c14","status":"reported","evidence":[{"locator":"On Tuesday, however, more Instagram users claimed to have had their accounts hacked.","relation":"supports","source_id":"s4"},{"locator":"who claimed to still be able to exploit Meta’s AI chatbot, and they were advertising apparently hacked handles for sale","relation":"supports","source_id":"s4"}],"assertion":"TechCrunch reported on 3 June 2026 that more Instagram users claimed to have had accounts hacked after Meta said the issue was resolved, and that members of a Telegram channel claimed they could still exploit the chatbot.","causal_attribution":"Claims by users and Telegram members as relayed by TechCrunch. The claims were not verified, and Meta's notice says the tool was disabled on 31 May 2026."}],"effects":[{"label":"A named security researcher reported that her Instagram password was changed without her knowledge and that she was logged out, and she told Reuters the account was reinstated in about five to ten minutes","claim_id":"c8","direction":"negative"},{"label":"The Instagram account of the U.S. Space Force's Chief Master Sergeant was reported compromised and briefly defaced with pro-Iranian content","claim_id":"c9","direction":"negative"},{"label":"Some account holders were reported locked out of their Instagram accounts, and one reported being unable to reach human support","claim_id":"c11","direction":"negative"},{"label":"Short Instagram handles were reported taken and offered for resale on Telegram","claim_id":"c12","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.maine.gov/cgi-bin/agviewerad/ret?loc=4169","kind":"regulatory_filing","access":"read","language":"en","translation_note":"Notice PDF read directly. Its text layer separates words with U+200B characters and detaches the first letter of some paragraphs, so locators from this source are given with those characters read as spaces.","independence_group":"meta-own-statements"},{"id":"s2","url":"https://web.archive.org/web/20260609035813id_/https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/686120c8-63be-4e3c-b7ed-466d65b672f5.html","kind":"official_record","access":"read","language":"en","translation_note":"","independence_group":"meta-own-statements"},{"id":"s3","url":"https://techcrunch.com/2026/06/01/hackers-hijacked-instagram-accounts-by-tricking-meta-ai-support-chatbot-into-granting-access/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s4","url":"https://techcrunch.com/2026/06/03/instagram-is-alerting-users-who-were-targeted-by-hackers-during-ai-chatbot-attacks/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s5","url":"https://www.404media.co/hackers-simply-asked-meta-ai-to-give-them-access-to-high-profile-instagram-accounts-it-worked/","kind":"news_report","access":"read","language":"en","translation_note":"Read through an Internet Archive capture of 1 June 2026 (20260601172133) because the live page is paywalled. The capture carries the full article.","independence_group":"attacker-posted-videos"},{"id":"s6","url":"https://krebsonsecurity.com/2026/06/hackers-used-metas-ai-support-bot-to-seize-instagram-accounts/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s7","url":"https://www.bbc.com/news/articles/c98rzr72dpyo","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s8","url":"https://www.theguardian.com/technology/2026/jun/01/meta-ai-hack-obama-sephora-instagram","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s9","url":"https://insideretail.us/how-the-sephora-instagram-hack-exposed-metas-ai-weakness/","kind":"wire_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s10","url":"https://gizmodo.com/hackers-tricked-meta-ai-into-handing-out-access-to-major-instagram-accounts-2000766087","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s11","url":"https://gizmodo.com/meta-says-thousands-of-instagram-accounts-were-breached-through-its-ai-support-assistant-2000768770","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"meta-own-statements"},{"id":"s12","url":"https://about.fb.com/news/2026/03/boosting-your-support-and-safety-on-metas-apps-with-ai/","kind":"official_statement","access":"read","language":"en","translation_note":"","independence_group":"meta-own-statements"}],"version":1,"ai_roles":["others_use","institutional_use"],"contexts":["privacy","everyday_life"],"unknowns":["How many people or organisations lost control of an account is not established. Meta's listing gives 20225 persons affected and the notice calls the Maine figure an upper bound, and the notice does not say how many accounts were organisational or how many were taken over.","Meta says it is unaware of what, if any, personal information was accessed. Whether any messages or data were read is unknown.","The start date rests on Meta's listing (17 April 2026), and the notice does not state its basis. 404 Media quotes a Telegram channel documenting the hack saying the exploits were 'getting abused after quietly working for months', and separately says that the same account originally posted in Telegram about the vulnerability 'at the end of March' (the year is not stated). Neither statement gives a start date for exploitation. Meta's announcement of 19 March 2026 says the support assistant was previewed 'in December' (year not stated in the passage) and that help with logging in was starting in select cases in the US and Canada, so no inspected source establishes the earliest date of exploitation.","The end date is Meta's date for disabling the tool (31 May 2026). TechCrunch reported unverified claims of continued exploitation on 3 June 2026.","The X posts, the Telegram videos and the Reddit complaints were not opened. Reporters' descriptions of them are used.","The notice does not say how many accounts were restored to their owners, and the listing shows 19 June 2026 as the date of consumer notification in a capture taken on 9 June 2026.","Figures of about 34,000 accounts targeted and a SimpliSafe account appeared only on an aggregator page that attributes the first figure to Meta without a citation and are not used."],"geography":{"basis":"Meta's notice to the Maine Attorney General counts 30 Maine users among those potentially impacted. The countries of the other affected people, the attackers (who reportedly used VPNs to appear in the target's location) and Meta's systems are not stated in the inspected sources, and the country of the named security researcher is not stated.","court_countries":[],"event_countries":[],"affected_person_countries":["US"]},"publication":{"basis":"Meta's notice to the Maine Attorney General (a PDF read directly) and the Maine listing (an archived capture) document Meta's own account of the exploited AI-assisted tool, the dates and the affected count. Nine news reports and Meta's March announcement were read in full. The mechanism claim has two independent chains (Meta's filing and attacker-posted videos checked by TechCrunch). Harm to named account holders rests on their own statements or on reporters relaying attacker-posted screenshots, so those claims stay at reported status. Only one account holder who spoke publicly is named. The office holder is described by office only.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"Meta's notice to the Maine Attorney General describes the affected system as an AI-assisted account recovery system (High Touch Support) and says it sent a password reset link to an email address not associated with the account. TechCrunch reports that no Meta employee or contractor took part in the exploit chats and checked one attacker mailbox for the code. Meta says the tool worked as intended, that the failure was a bug in a separate code path that did not verify the email address, and (to Gizmodo) that the failure was not due to the AI agent itself. Whether the AI component or the separate code path caused the failure is disputed and was not tested.","status":"supported"},"person_relations":["made_decision_about"]},"name":"Third parties exploit Meta's AI-assisted Instagram account recovery tool to reset passwords, with account takeovers reported (17 April to 31 May 2026)","summary":"Meta announced the rollout of its AI support assistant on Facebook and Instagram on 19 March 2026. Meta's filing with the Maine Attorney General (notice dated 5 June 2026) says unauthorized third parties exploited a vulnerability in its AI-assisted Instagram account recovery tool (High Touch Support) to receive password reset links for accounts they did not own, and the listing gives 17 April 2026 as the breach date and 31 May 2026 as the discovery date. Videos that attackers posted, as described by TechCrunch, 404 Media and Krebs on Security, show attackers asking the assistant in a chat to link a new email address to a target username. Reported victims include the security researcher Jane Manchun Wong, who posted that her password was changed without her knowledge, the Instagram account of the U.S. Space Force's Chief Master Sergeant, and the accounts of Sephora and a dormant Obama White House page (TechCrunch marks the last as disputed by Meta). Krebs and the BBC report pro-Iran defacement of some accounts, and TechCrunch reports that some victims were locked out and that short handles were offered for resale. The filing gives 20225 persons affected in total and 30 in Maine, and the notice calls the Maine figure an upper bound. Meta says the tool worked as intended, that a bug in a separate code path failed to check the email address, and (through a spokesperson to Gizmodo) that the failure was not due to the AI agent itself. Meta says it disabled the tool on 31 May 2026, the day it discovered the exploitation.","incidentDate":"2026-04-17","incidentEndDate":"2026-05-31","incidentKind":"bounded_series","incidentDatePrecision":"range","exposurePattern":"unknown","reportedDate":"2026-06-01","aiSystem":"Meta AI support assistant / High Touch Support (AI-assisted Instagram account recovery tool)","aiProduct":"Meta AI support assistant","aiCompany":"Meta","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm","reputational_harm"],"harmOutcomeSummary":"Reporters and Meta's notice report that third parties reset passwords on Instagram accounts and, where the account had no two-factor authentication, could log in. A named security researcher reports her password was changed without her knowledge and that reinstating the account took about five to ten minutes. Krebs on Security and the BBC report that some high-profile accounts were briefly defaced, TechCrunch reports that some victims were locked out and that short handles were offered for resale, and Meta says it does not know what personal information, if any, was accessed. Meta's filing gives 20225 persons affected in total, and its notice calls the Maine figure an upper bound.","frameworkFacets":[],"causationStatus":"disputed","participantUsersAffectedMin":0,"otherPeopleHarmedMin":2,"affectedCountStatus":"partial","affectedCountEvidence":"Two account holders are counted: the security researcher who posted that her account was taken over, and the office holder whose Instagram account TechCrunch and Krebs on Security report as compromised. TechCrunch's 3 June article says this account 'appeared to be' among the victims, no statement from the office holder or from Meta about this account was inspected, and whether it is a personal or an official account is not stated. Sephora and the Obama White House account are organisational or institutional accounts and are not counted. Other victims (everyday users, short-handle holders) are unquantified. Meta's listing of 20225 persons affected is not counted: the notice calls the Maine figure an upper bound and does not say how many accounts were taken over or how many were organisational.","victimAgeRange":"unknown","platformType":"assistant","primarySourceUrl":"https://www.maine.gov/cgi-bin/agviewerad/ret?loc=4169","primarySourceLabel":"Meta incident notification to the Maine Attorney General (5 June 2026)","firstPublishedAt":"2026-09-29T21:16:54.181323+00:00","updatedAt":"2026-09-30T01:17:45.477765+00:00","scopeVersion":"facts-v3","tags":["historical-2026"]},{"id":"2026-us-meta-26-employees-sue-alleging-ai-assisted-may-layoff-selection-penalized-protected-leave","caseFacts":{"claims":[{"id":"c1","status":"documented","evidence":[{"locator":"OAKLAND DIVISION","relation":"supports","source_id":"s1"},{"locator":"Filed 07/13/26","relation":"supports","source_id":"s1"},{"locator":"Plaintiffs initiated this lawsuit on July 13, 2026, bringing claims against Meta","relation":"supports","source_id":"s2"},{"locator":"A group of 26 Meta employees has sued the company, claiming it used artificial intelligence systems to select people for layoffs, disproportionately targeting those on medical, parental or family leave.","relation":"supports","source_id":"s6"}],"assertion":"On 13 July 2026 twenty-six anonymous plaintiffs (Does 1 through 26) filed a complaint against Meta Platforms, Inc. in the US District Court for the Northern District of California, Oakland division, alleging employment discrimination in the May 2026 reduction in force.","causal_attribution":"The filing of the complaint is documented by the court record. The complaint establishes only the plaintiffs’ allegations."},{"id":"c2","status":"reported","evidence":[{"locator":"activity-monitoring data, AI-token-usage dashboards, and algorithmically assisted","relation":"supports","source_id":"s1"},{"locator":"artificial-intelligence-assisted systems to score, rank, and select employees for inclusion","relation":"supports","source_id":"s1"},{"locator":"algorithmic productivity scoring drawn from keystroke, screen-content, mouse,","relation":"supports","source_id":"s1"},{"locator":"The parties dispute whether Meta utilized AI in deciding to terminate plaintiffs’","relation":"supports","source_id":"s2"},{"locator":"They claim that Meta used a number of internal AI-assisted systems to score and rank employees on a termination list.","relation":"supports","source_id":"s7"}],"assertion":"The complaint alleges, on information and belief, that Meta used a set of internal AI-assisted systems to score, rank and select employees for the termination list: the Metamate internal large-language-model assistant, employee-trained \"second brain\" agents, keystroke and other activity-monitoring data, AI-token-usage dashboards, and algorithmically assisted performance ranking and calibration.","causal_attribution":"These are the plaintiffs’ allegations, pleaded on information and belief and supported by plaintiff declarations that were not inspected (they are quoted in the complaint and the order). Meta disputes them (claim c4). The news reports and the court order restate the complaint and are one reporting chain with it."},{"id":"c3","status":"reported","evidence":[{"locator":"be accumulated by an employee who is on protected medical or family leave, or whose","relation":"supports","source_id":"s1"},{"locator":"protected-leave-takers or accommodation-seekers for individualized human review. Meta","relation":"supports","source_id":"s1"},{"locator":"On information and belief, Meta did not neutralize any of the foregoing inputs for","relation":"supports","source_id":"s1"},{"locator":"result was that employees who took protected leaves were disproportionately selected for","relation":"supports","source_id":"s1"},{"locator":"Plaintiffs are twenty-six current and former Meta employees, each of whom Meta","relation":"supports","source_id":"s1"},{"locator":"selected for separation in the RIF, and each of whom","relation":"supports","source_id":"s1"},{"locator":"About half the plaintiffs had taken leave for caregiving or pregnancy-related reasons.","relation":"supports","source_id":"s6"}],"assertion":"The complaint alleges that the inputs to these systems cannot be accumulated by an employee on protected medical, family or parental leave, that Meta did not neutralise them for protected leave, and that employees who took protected leave were therefore disproportionately selected for layoff. It states that each plaintiff was selected for separation in the reduction in force and had, within the 24 months before it, taken, requested or been approved for protected leave, or requested or received a disability accommodation.","causal_attribution":"Allegation of the plaintiffs. The court found on 17 July 2026 only serious questions going to the merits and no likelihood of success on that record (claim c5). Whether any AI system affected any plaintiff’s selection is unresolved."},{"id":"c4","status":"reported","evidence":[{"locator":"Workforce management and organizational decisions were and are made by people, not AI.","relation":"supports","source_id":"s6"},{"locator":"selection decisions in the RIF were “made by human","relation":"supports","source_id":"s2"},{"locator":"promotion history over a defined period. There was no AI-","relation":"supports","source_id":"s2"},{"locator":"was selected based on leave status, disability, or any other protected characteristic,","relation":"supports","source_id":"s2"},{"locator":"“selection decision [was] made by ‘AI.’” Id. ¶ 11.","relation":"supports","source_id":"s2"},{"locator":"Selection decisions were made by human business leaders","relation":"supports","source_id":"s9"},{"locator":"defined period. There was no AI-assisted “scoring” or “ranking” related to employee","relation":"supports","source_id":"s9"},{"locator":"guidance does not permit AI adoption and usage metrics to be used as negative factors in","relation":"supports","source_id":"s3"},{"locator":"performance reviews in 2025 or as selection criteria in the RIF.","relation":"supports","source_id":"s3"}],"assertion":"Meta denies the allegations. A Meta spokesperson said workforce management and organisational decisions were made by people, not AI. In declarations filed by a Meta human-resources director, Meta states that selection decisions were made by human business leaders using documented neutral criteria, that no AI-assisted scoring or ranking of employee performance was used, that no plaintiff was selected on the basis of leave status or disability, and that no selection decision was made by AI.","causal_attribution":"Meta’s statements and declarations about its own process. They are a party account and had been tested only through briefing and court hearings (claims c5 and c7), not in discovery."},{"id":"c5","status":"documented","evidence":[{"locator":"described below, the TRO is DENIED.","relation":"supports","source_id":"s2"},{"locator":"The parties dispute whether Meta utilized AI in deciding to terminate plaintiffs’","relation":"supports","source_id":"s2"},{"locator":"plaintiffs have not shown a likelihood of success on the merits, but rather a “serious question[]”","relation":"supports","source_id":"s2"},{"locator":"Loss of health care, employment, protected leave, and unvested restricted stock units (“RSUs”) are","relation":"supports","source_id":"s2"},{"locator":"Loss of immigration status is different. Four of the plaintiffs have employment-based,","relation":"supports","source_id":"s2"},{"locator":"they were not in the rooms where it happened.","relation":"supports","source_id":"s2"}],"assertion":"On 17 July 2026 the court denied the plaintiffs’ motion for a temporary restraining order. The order records that the parties dispute whether Meta used AI in deciding to terminate the plaintiffs, finds serious questions going to the merits but no shown likelihood of success on that record, finds that loss of health care, employment, protected leave and unvested equity can be remedied in arbitration, and treats the possible loss of immigration status for four plaintiffs with Meta-sponsored visas as a potentially irreparable harm that needed more information.","causal_attribution":"A court order establishes what the court ruled and recorded. It does not establish that AI was or was not used in the selection."},{"id":"c6","status":"reported","evidence":[{"locator":"On May 20, 2026, Meta began notifying the selected employees by email, beginning with","relation":"supports","source_id":"s1"},{"locator":"finalized on or about July 22, 2026 (and on or about August 20, 2026 for New York","relation":"supports","source_id":"s1"},{"locator":"laid off on May 20, 2026.” Complaint (“Compl.”) [Dkt. No. 1] ¶ 45 (the “mass reduction in force”","relation":"supports","source_id":"s2"},{"locator":"Though they have been notified of their layoffs, all 26 remain employed by Meta, with separations set to begin July 22.","relation":"supports","source_id":"s6"},{"locator":"Meta in May notified nearly 8,000 employees, or about 10% of its global workforce, that they were losing their jobs","relation":"supports","source_id":"s7"},{"locator":"Laid-off workers remain on the payroll but lost access to Meta systems on May 20","relation":"supports","source_id":"s7"}],"assertion":"Meta began notifying employees selected in the reduction in force on 20 May 2026 (about 8,000 employees, roughly 10 percent of its workforce). The complaint says the plaintiffs were notified of their selection from that date, and that separations were scheduled for about 22 July 2026 (later for some plaintiffs). Meta said in court filings that laid-off workers stayed on the payroll but lost access to Meta systems on 20 May.","causal_attribution":"The notification date and the scheduled separation dates come from the complaint and Meta court filings as relayed by Reuters. The sources inspected do not report whether each separation took place on its scheduled date, although Courthouse News called the plaintiffs former employees on 24 August 2026."},{"id":"c7","status":"reported","evidence":[{"locator":"Hearing on Motion for Preliminary Injunction conducted via videoconference. The Court","relation":"supports","source_id":"s5"},{"locator":"summarizes tentative. Argument of counsel heard. Motion taken under submission; written order","relation":"supports","source_id":"s5"},{"locator":"I have a record I have to deal with and the record at the moment does not persuade me of the merits","relation":"supports","source_id":"s8"},{"locator":"categorical denial of any impact of AI in the termination process","relation":"supports","source_id":"s8"},{"locator":"whether what plaintiffs think happened, happened","relation":"supports","source_id":"s8"}],"assertion":"The court held a hearing on the plaintiffs’ preliminary injunction motion on 24 August 2026, heard argument and took the motion under submission with a written order to follow. Courthouse News reports that the judge said the record at that time did not persuade the judge of the merits, that the plaintiffs’ evidence raised some potential questions about Meta’s categorical denial of any impact of AI in the termination process, and that the case turns on whether what plaintiffs think happened, happened.","causal_attribution":"The minute entry documents that the hearing occurred and the motion was taken under submission. The judge’s remarks are reported by one news outlet and the transcript was not inspected. No written ruling on the preliminary injunction was found as of 29 September 2026."},{"id":"c8","status":"documented","evidence":[{"locator":"and only Plaintiff Doe 20, hereby voluntarily dismisses","relation":"supports","source_id":"s10"},{"locator":"remain parties and continue to prosecute this action","relation":"supports","source_id":"s10"},{"locator":"Doe 20 was voluntarily dismissed from this action on August 3, 2026 pursuant to Federal","relation":"supports","source_id":"s4"},{"locator":"is made on behalf of Doe 20, and no relief is sought on Doe 20’s behalf.","relation":"supports","source_id":"s4"}],"assertion":"One plaintiff (Doe 20) voluntarily dismissed all of that plaintiff’s claims without prejudice on 3 August 2026 (Dkt. 33), and the notice states that Does 1 through 19 and 21 through 26 remain parties. No reason is given in the notice.","causal_attribution":"A filing by the plaintiffs’ counsel records the dismissal. It does not say whether that plaintiff was selected in the reduction in force or why the dismissal was made."},{"id":"c9","status":"reported","evidence":[{"locator":"They recognize that their claims must be arbitrated, and they have initiated arbitration proceedings","relation":"supports","source_id":"s2"},{"locator":"with the American Arbitration Association (AAA). Here, they seek a temporary restraining order:","relation":"supports","source_id":"s2"},{"locator":"while they pursue their claims in private arbitration","relation":"supports","source_id":"s7"},{"locator":"from this Court only the status-quo-preserving provisional relief that Meta’s own","relation":"supports","source_id":"s1"},{"locator":"G. Reserve to the arbitral forum all relief on the merits, including but not limited to","relation":"supports","source_id":"s1"}],"assertion":"The 17 July 2026 order records that the plaintiffs recognize their claims must be arbitrated and that they have initiated arbitration proceedings with the American Arbitration Association. The complaint says the plaintiffs seek from the court only status-quo-preserving provisional relief pending an independent audit of the selection process and arbitration of the merits, and it reserves merits relief such as reinstatement, back pay and damages to the arbitral forum.","causal_attribution":"The order records the plaintiffs’ own statement about their arbitration filings. The arbitration itself is confidential and its progress is unknown."}],"effects":[{"label":"Employees on or after protected leave allegedly disproportionately selected for layoff by an AI-assisted process that did not account for leave (disputed by Meta)","claim_id":"c3","direction":"negative"},{"label":"Plaintiffs notified of selection for termination on 20 May 2026, with separations scheduled from 22 July 2026 and possible loss of health coverage, unvested equity and (for four plaintiffs) work-visa status","claim_id":"c6","direction":"negative"}],"sources":[{"id":"s1","url":"https://storage.courtlistener.com/recap/gov.uscourts.cand.474171/gov.uscourts.cand.474171.1.0.pdf","kind":"court_filing","access":"read","language":"en","translation_note":"","independence_group":"meta-complaint"},{"id":"s2","url":"https://storage.courtlistener.com/recap/gov.uscourts.cand.474171/gov.uscourts.cand.474171.25.0.pdf","kind":"court_order","access":"read","language":"en","translation_note":"","independence_group":"ndcal-court-record"},{"id":"s3","url":"https://storage.courtlistener.com/recap/gov.uscourts.cand.474171/gov.uscourts.cand.474171.42.1_1.pdf","kind":"court_filing","access":"read","language":"en","translation_note":"","independence_group":"meta-court-declarations"},{"id":"s4","url":"https://storage.courtlistener.com/recap/gov.uscourts.cand.474171/gov.uscourts.cand.474171.46.0.pdf","kind":"court_filing","access":"read","language":"en","translation_note":"","independence_group":"ndcal-court-record"},{"id":"s5","url":"https://storage.courtlistener.com/recap/gov.uscourts.cand.474171/gov.uscourts.cand.474171.49.0.pdf","kind":"court_record","access":"read","language":"en","translation_note":"","independence_group":"ndcal-court-record"},{"id":"s6","url":"https://www.cbsnews.com/news/26-meta-workers-sue-ai-aided-layoffs-medical-family-leave/","kind":"wire_report","access":"read","language":"en","translation_note":"","independence_group":"meta-complaint"},{"id":"s7","url":"https://www.spokesman.com/stories/2026/jul/17/us-judge-wont-block-meta-from-laying-off-workers-w/","kind":"wire_report","access":"read","language":"en","translation_note":"","independence_group":"reuters-tro-coverage"},{"id":"s8","url":"https://www.courthousenews.com/meta-workers-claiming-ai-fired-them-unlikely-to-see-relief/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"courthouse-news-hearing"},{"id":"s9","url":"https://storage.courtlistener.com/recap/gov.uscourts.cand.474171/gov.uscourts.cand.474171.31.0.pdf","kind":"court_filing","access":"read","language":"en","translation_note":"","independence_group":"meta-court-declarations"},{"id":"s10","url":"https://storage.courtlistener.com/recap/gov.uscourts.cand.474171/gov.uscourts.cand.474171.33.0.pdf","kind":"court_filing","access":"read","language":"en","translation_note":"","independence_group":"ndcal-court-record"}],"version":1,"ai_roles":["institutional_use"],"contexts":["work","health"],"unknowns":["Whether any AI system scored, ranked or selected any plaintiff is unresolved. The complaint pleads it on information and belief. Meta denies it in declarations. No discovery had occurred in the sources inspected, and the judge said on 17 July 2026 that plaintiffs were not in the rooms where the selections happened.","The sources inspected do not show how many people beyond the plaintiffs were selected because of leave, or how many of the roughly 8,000 laid-off employees were scored by any AI-assisted system. Only the plaintiffs are counted as reported harmed.","The order on the preliminary injunction motion (argued 24 August 2026, taken under submission) had not been found by 29 September 2026. The hearing remarks were read only through one news report and the transcript was not inspected.","Whether each plaintiff’s separation took place on its scheduled date (22 July 2026 for most, later for some) is not stated in the sources inspected. Reuters and CBS/AP describe the plaintiffs as still employed in July, and Courthouse News called them former employees on 24 August 2026.","One plaintiff (Doe 20) was voluntarily dismissed on 3 August 2026 and no reason is stated. The affected count therefore uses 25.","The complaint and declarations contain individual medical, pregnancy and immigration details. They are anonymised in the public copies and are deliberately not described here.","Reuters and WSJ pages for the initial filing could not be read (HTTP 401). Reuters coverage of the 17 July ruling was read through a Spokesman-Review copy. The Law.com article was behind a subscription wall and was not cited.","The complaint alleges that data captured by a separate Meta employee-monitoring program (the Model Capability Initiative) supplied inputs to the selection process, and Meta denies that AI was used in the selection. That program’s own privacy and security consequences are a different event, recorded as 2026-meta-mci-us-employee-keystroke-and-screen-capture-for-ai-training-then-internal-data-exposure, and are not part of this record."],"geography":{"basis":"The complaint states that the plaintiffs worked in California, Illinois, Washington, New York, the District of Columbia, Pennsylvania and Florida and the suit is in the US District Court for the Northern District of California. Meta also notified employees in other countries in the same reduction in force, but no plaintiff outside the US is described.","court_countries":["US"],"event_countries":["US"],"affected_person_countries":["US"]},"publication":{"basis":"The complaint, the court order denying the temporary restraining order, two Meta declarations, the plaintiffs’ notice of dismissal of one plaintiff and the hearing minute entry were read from the court record (CourtListener copies), with CBS/AP, Reuters and Courthouse News reports. Every AI-related statement is attributed. The plaintiffs are anonymous in the record and are not described individually. Meta denies that AI made or informed any selection decision and the court has not resolved the dispute.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"The complaint alleges, on information and belief, that Meta used internal AI-assisted systems (Metamate, second-brain agents, activity-monitoring scoring, AI-token-usage dashboards, algorithmic ranking and calibration) to score, rank and select employees for the 20 May 2026 termination list. Meta’s declarations say selection decisions were made by human business leaders and that there was no AI-assisted scoring or ranking related to employee performance, and the court described the declarations as saying Meta did not use AI in any way with respect to the RIF. The court recorded that the parties dispute whether Meta used AI in deciding to terminate the plaintiffs and found on 17 July 2026 that the plaintiffs had not shown a likelihood of success on the current record. On 24 August 2026 the judge said the plaintiffs’ evidence raised some potential questions about Meta’s categorical denial. No discovery had tested Meta’s account in the sources inspected.","status":"disputed"},"person_relations":["made_decision_about","made_claim_about"]},"name":"US: 26 Meta employees sue alleging an AI-assisted May 2026 layoff selection penalized workers on protected leave, Meta says people made the decisions","summary":"On 20 May 2026 Meta began notifying about 8,000 employees (roughly 10 percent of its workforce) that they had been selected for layoff. On 13 July 2026 twenty-six anonymous employees who had taken or requested medical, pregnancy, parental or family leave, or a disability accommodation, sued Meta in the US District Court for the Northern District of California. The complaint alleges, on information and belief, that Meta used internal AI-assisted systems (including the Metamate assistant, keystroke and activity monitoring, AI-token-usage dashboards and algorithmic performance ranking) to score, rank and select employees, and that these inputs could not accumulate during protected leave, so plaintiffs on leave were disproportionately selected. Meta says workforce decisions were made by people, not AI, and that no selection decision was made by AI. On 17 July 2026 the court denied a temporary restraining order, recording that the parties dispute whether Meta used AI in the terminations and finding serious questions on the merits but no shown likelihood of success. One plaintiff was voluntarily dismissed on 3 August 2026. The preliminary injunction motion was argued on 24 August 2026 and taken under submission. The plaintiffs are pursuing their merits claims in arbitration and the allegations are unproven.","incidentDate":"2026-05-20","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"unknown","reportedDate":"2026-07-14","aiSystem":"Meta internal AI-assisted systems alleged in the complaint: the Metamate internal LLM assistant, employee-trained \"second brain\" agents, keystroke and activity-monitoring productivity scoring, AI-token-usage dashboards and AI-assisted performance calibration (Meta denies AI was used in selecting employees for the layoff)","aiProduct":"Meta internal AI systems (reported)","aiCompany":"Meta Platforms, Inc.","severity":"medium","verificationStatus":"disputed","harmCategories":[],"harmOutcomes":["professional_harm"],"harmOutcomeSummary":"The complaint alleges that 26 employees were selected for termination in Meta’s May 2026 reduction in force through an AI-assisted process that penalised protected leave, with separations scheduled from 22 July 2026 and asserted losses of employer-subsidised health coverage, unvested equity and, for four plaintiffs, work-visa status. Meta denies that AI was used in the selections. The court found the alleged harms other than immigration status remediable in arbitration and has not decided the merits.","frameworkFacets":[],"causationStatus":"disputed","participantUsersAffectedMin":0,"otherPeopleHarmedMin":25,"affectedCountStatus":"documented_minimum","affectedCountEvidence":"The complaint states that each of 26 plaintiffs was selected for separation in the May 2026 reduction in force. One plaintiff was voluntarily dismissed on 3 August 2026 without a stated reason, so 25 active plaintiffs are counted as a documented minimum. The roughly 8,000 other employees notified in the reduction in force are not counted because no source ties their selection to the alleged AI process.","victimAgeRange":"adult","platformType":"other","primarySourceUrl":"https://storage.courtlistener.com/recap/gov.uscourts.cand.474171/gov.uscourts.cand.474171.1.0.pdf","primarySourceLabel":"Complaint, Does 1 through 26 v. Meta Platforms, Inc. (N.D. Cal., filed 13 Jul 2026)","firstPublishedAt":"2026-09-29T21:16:06.345461+00:00","updatedAt":"2026-09-30T01:17:57.733761+00:00","scopeVersion":"facts-v3","tags":["historical-2026"]},{"id":"2026-utah-meta-ai-suggested-prompts-children-profile","caseFacts":{"claims":[{"id":"c1","status":"corroborated","evidence":[{"locator":"'Meta AI posed a series of invasive prompts under the video, such as \"Who's the child passenger?\" and \"Where does Kalie Robins live?\"'; 'pulled information from her past posts ... including her location'; 'drew on other profiles, such as her mother's account'.","relation":"supports","source_id":"s1"},{"locator":"'Who's the child passenger?'; 'their names, birth information, pictures and videos of them'; 'It pieced together my information to show people where I live'.","relation":"supports","source_id":"s3"},{"locator":"'suggested questions aimed at uncovering information about her children — including their names, birthdates, videos, newborn photos, even photos that had been deleted — and, ultimately, her live location'.","relation":"supports","source_id":"s2"}],"assertion":"Meta AI suggested prompts under Robins's 1 September car video including 'Who's the child passenger?' and 'Where does Kalie Robins live?', and clicking them produced her daughters' names, birth details, photos and videos from her own and relatives' posts, and assembled her likely location.","causal_attribution":"Robins's account given in separate interviews to CNET, NewsNation and Futurism; Meta does not dispute that the prompts were generated."},{"id":"c2","status":"corroborated","evidence":[{"locator":"'A Meta spokesperson told CNET in an email that it \"fixed\" the issue and that Meta AI will no longer suggest inappropriate, personal questions on users' posts'.","relation":"supports","source_id":"s1"},{"locator":"'\"While the content was available to this user, these prompts should never have been generated,\" Meta spokesperson Dina El-Kassaby said, according to The Verge'.","relation":"supports","source_id":"s4"},{"locator":"'its AI search feature \"missed the mark\"'; '\"fixed that issue\"'.","relation":"supports","source_id":"s3"}],"assertion":"Meta said the prompts 'missed the mark' and 'should never have been generated', that responses draw only on information the user can already access, and that it fixed the issue so Meta AI no longer suggests personal questions about people in posts.","causal_attribution":"Meta statements to three outlets."},{"id":"c3","status":"disputed","evidence":[{"locator":"'Meta also denied Robins' claim that its AI accessed a photo deleted years ago. Instead, Meta told CNET that the photo of Robins' kids was deleted right before the video was made and that a temporary bug briefly kept it visible. Robins disputed this'.","relation":"supports","source_id":"s1"}],"assertion":"Robins says one surfaced photo had been deleted years earlier; Meta says the photo was deleted shortly before the video and remained briefly visible because of a temporary bug.","causal_attribution":"Competing accounts from Robins and Meta reported by CNET."}],"effects":[{"label":"Meta AI prompts compiled a mother's young daughters' names, birth details and photos and her likely location; the mother reported distress and lost trust; Meta changed the feature","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.cnet.com/tech/services-and-software/meta-ai-viral-video-personal-prompts-about-kids/","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-09-18 (CNET, 12 Sep 2026). Direct interview with Robins plus Meta's emailed statement to CNET and its dispute of the deleted-photo detail.","independence_group":"cnet"},{"id":"s2","url":"https://www.newsnationnow.com/business/tech/ai/mom-meta-ai-analyzing-posts-about-kids/","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-09-18 via the MSN content API copy (NewsNation, 17 Sep 2026; the newsnationnow.com host returns 403 to this box). Interview with Robins including the distress quotation.","independence_group":"newsnation"},{"id":"s3","url":"https://torontosun.com/news/world/utah-mom-sounds-alarm-after-meta-ai-digs-up-details-about-her-children-im-done","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-09-18 via the MSN content API copy (Toronto Sun, 15 Sep 2026). Relays Futurism's interview and Meta's statement to Futurism; treated as the Futurism chain.","independence_group":"futurism"},{"id":"s4","url":"https://www.dexerto.com/entertainment/meta-changes-ai-prompts-after-chatbot-asked-mother-to-identify-her-child-3408508/","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-09-18 (Dexerto, 12 Sep 2026). Relays The Verge's report of Meta spokesperson Dina El-Kassaby's statement; treated as The Verge chain.","independence_group":"verge"}],"version":1,"ai_roles":["own_use","institutional_use"],"contexts":["privacy","everyday_life","relationships"],"unknowns":["What Meta changed and how many other users saw similar prompts about children is not disclosed.","Whether the compiled information was shown to anyone other than Robins is not established.","No regulator has announced an inquiry in the inspected sources."],"geography":{"basis":"Robins is described as a Utah mother (Toronto Sun/Futurism; TRT Haber); the posts and prompts occurred on her US Instagram/Facebook accounts. No court.","court_countries":[],"event_countries":["US"],"affected_person_countries":["US"]},"publication":{"basis":"Published under the 2026-09-15 charter as a privacy and made-claim-about case: an AI feature compiled identifying details about two young children and a named adult's location, the adult reported distress and loss of control, and the company acknowledged the prompts should not have been generated. Four sources across four reporting chains read; the children's details are not reproduced. Low severity.","reviewed_on":"2026-09-18"},"ai_involvement":{"basis":"Meta acknowledged to CNET and The Verge that its AI generated the suggested prompts and that they 'should never have been generated', and said it fixed the issue. The AI made claims about identified people (the children's identities and the mother's location) rather than conversing with them; the mother's clicks on the prompts are recorded as own_use, and the platform's default feature as institutional_use.","status":"supported"},"person_relations":["made_claim_about"]},"name":"Utah: Meta AI's suggested prompts under a mother's Instagram video compiled her young daughters' names, birth details and old photos and her likely home location; Meta said the prompts 'missed the mark' and changed the feature","summary":"On 1 September 2026 Kalie Robins, a Utah travel creator, posted a short Instagram video of herself singing in the car with one of her daughters; it was also shown on Facebook. The next day she noticed Meta AI had placed suggested questions under the post, starting with 'Who's the child passenger?'. Clicking the prompts, she said, produced her two daughters' names, birth information, photos and videos drawn from her own and relatives' past posts, including a newborn photo from her mother's account and a picture she believed she had deleted years earlier, and a further prompt, 'Where does Kalie Robins live?', assembled older and newer posts into her likely location. Her 2 September reaction video drew more than 310,000 likes. Meta told reporters the prompts 'missed the mark', 'should never have been generated' and had been fixed, while saying the feature only surfaces information the user can already access; it disputed that a long-deleted photo was used, saying the photo had been deleted shortly before the video and remained briefly visible through a bug. Robins said Meta never contacted her and that the episode left her feeling she had 'failed' her children.","incidentDate":"2026-09-02","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"single_interaction","reportedDate":"2026-09-10","aiSystem":"Meta AI (suggested-question prompts under Instagram and Facebook posts, drawing on the user's and related accounts' content)","aiProduct":"Meta AI","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["psychological_distress"],"harmOutcomeSummary":"A mother experienced distress and a loss of control over her children's privacy after Meta AI's suggested prompts compiled her two young daughters' identifying details and her likely location from scattered family posts; Meta acknowledged the prompts should not have been generated and changed the feature.","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":1,"otherPeopleHarmedMin":2,"affectedCountStatus":"exact","affectedCountEvidence":"Kalie Robins (who used the prompts and reported distress) and her two daughters, whose identifying details were compiled. Exact count of three; her mother and other relatives whose posts were drawn on are not counted as harmed.","victimAgeRange":"minor","jurisdiction":"US","platformType":"assistant","outcomeType":"internal_action","outcomeStatus":"resolved","primarySourceUrl":"https://www.cnet.com/tech/services-and-software/meta-ai-viral-video-personal-prompts-about-kids/","primarySourceLabel":"CNET, 12 Sep 2026: Mother calls for 'accountability' after Meta AI mines family posts for info on minors (interview with Kalie Robins; Meta statement)","firstPublishedAt":"2026-09-18T03:25:15.671921+00:00","updatedAt":"2026-09-30T01:17:58.137201+00:00","scopeVersion":"facts-v3","tags":["meta-ai","instagram","facebook","privacy","children","profiling","suggested-prompts","united-states","utah","made-claim-about"]}]}