{"meta":{"exportedAt":"2026-10-16T06:54:57.970Z","formatVersion":2,"selection":{"q":"recovery","system":"","harm":"","context":"","country":"","role":"","relation":"contextual","evidence":"","year":"","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":3,"coverage":{"cases":3,"countries":1,"languages":1,"unknownLocation":2,"locationPending":0,"unknownLanguage":0,"unknownDate":1,"lawsuits":1,"regulatory":0,"minors":0,"coreRelations":0,"contextualRelations":3,"mixedRelations":0,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2026-meta-instagram-ai-assisted-account-recovery-tool-exploited-to-reset-passwords","caseFacts":{"claims":[{"id":"c1","status":"corroborated","evidence":[{"locator":"the system incorrectly sent a password reset link to that unassociated email rather than rejecting the request","relation":"supports","source_id":"s1"},{"locator":"This allowed unauthorized third parties to receive a password reset link for accounts they did not own","relation":"supports","source_id":"s1"},{"locator":"The chatbot can be seen sending a verification code to the email address provided by the hacker","relation":"supports","source_id":"s3"},{"locator":"TechCrunch was able to verify that the hacker’s public email mailbox, which was displayed in the video, effectively received the verification code.","relation":"supports","source_id":"s3"}],"assertion":"Through Meta's AI-assisted account recovery support system (High Touch Support), third parties received password reset links or verification codes for Instagram accounts they did not own, sent to an email address that was not associated with the account.","causal_attribution":"Two evidential bases: Meta's own notice to the Maine Attorney General (a party's account of its own system) and videos the attackers posted, in which TechCrunch confirmed that the mailbox shown received the verification code. TechCrunch's check covers that one delivery. It did not test which Meta tool sent the code or who owned the target account, and the videos were not opened for this review. The link between the chat assistant in the videos and High Touch Support is made by press reports and by Meta's spokesperson referring to the AI agent. No inspected document names both. Meta says the tool worked as intended and the failure lay in a separate code path (see c5), so the AI component's own contribution is disputed."},{"id":"c2","status":"reported","evidence":[{"locator":"the hacker opened a chat with Meta AI Support Assistant and asked the bot to add a new email address to the target’s account.","relation":"supports","source_id":"s3"},{"locator":"which prompts the chatbot to show a button to “Reset Password.”","relation":"supports","source_id":"s3"},{"locator":"One video shows a hacker starting a conversation with Meta’s AI support bot and asking it to link the target account with a new email address","relation":"supports","source_id":"s5"},{"locator":"using a VPN connection with an IP address that is in or near the target’s usual hometown","relation":"supports","source_id":"s6"},{"locator":"The bot followed through with the request - sending a code to the hacker's email which, when verified, was followed by an email with a link to change their password.","relation":"supports","source_id":"s7"}],"assertion":"Attackers asked Meta's AI support assistant in a chat to add or link a new email address to a target Instagram username, and some used a VPN to appear in the target's location. In one video the assistant then sent a verification code to that address and showed a button to reset the password.","causal_attribution":"Every account of the chat steps traces to videos and screenshots the attackers posted on Telegram and X. TechCrunch checked one displayed mailbox. The other videos were not independently reproduced."},{"id":"c3","status":"reported","evidence":[{"locator":"the unauthorized party was able to log in to the account if the account holder had not enabled two-factor authentication (2FA)","relation":"supports","source_id":"s1"},{"locator":"The hackers who released the video on Telegram said their exploit failed to work against any accounts that had MFA enabled.","relation":"supports","source_id":"s6"}],"assertion":"Meta's notice says the account could be logged into after the password reset if the account holder had not enabled two-factor authentication. Krebs on Security reports that the attackers who posted the video said the exploit failed against accounts with multi-factor authentication.","causal_attribution":"Meta's statement about its own system and the attackers' own statement as relayed by Krebs. Neither was tested independently."},{"id":"c4","status":"reported","evidence":[{"locator":"it can also take action for you on a growing set of requests directly within Facebook and in the future, on Instagram, including:","relation":"supports","source_id":"s12"},{"locator":"Resetting passwords","relation":"supports","source_id":"s12"},{"locator":"We’ve also started rolling out the support assistant to people who need help logging into their Facebook and Instagram accounts, starting with select cases in the US and Canada","relation":"supports","source_id":"s12"}],"assertion":"Meta announced the Meta AI support assistant for Facebook and Instagram on 19 March 2026, described it as able to take action on requests including resetting passwords directly within Facebook and, in the future, on Instagram, and said it had started rolling it out to people who need help logging into Facebook and Instagram accounts, starting with select cases in the US and Canada.","causal_attribution":"Meta's own product announcement. The announcement does not say which tool the exploited flow used. The link between this assistant and the High Touch Support tool named in Meta's notice is made by the press reports and by the notice's own description of an AI-assisted account recovery system."},{"id":"c5","status":"disputed","evidence":[{"locator":"The tool itself worked properly and functioned as intended; however due to a bug in a separate code path, the system did not properly verify that the email address provided by the individual requesting a password reset matched the email address associated with that user’s Instagram account.","relation":"supports","source_id":"s1"},{"locator":"Some of our internal backend checks failed in this instance, but it wasn’t due to the AI agent itself, and we’ve addressed the underlying cause.","relation":"supports","source_id":"s11"},{"locator":"Hackers simply told Meta’s AI chatbot that they were the owners of the target’s account, and asked the bot to link that person’s account to an email they controlled. The chatbot complied with the request","relation":"contradicts","source_id":"s4"}],"assertion":"Whether the failure lay in the AI agent or in a separate code path is disputed. Meta's notice says the tool worked as intended and that a bug in a separate code path did not check the requester's email address against the account, and a Meta spokesperson told Gizmodo that some internal backend checks failed and that this was not due to the AI agent itself. TechCrunch describes the chatbot as complying with the attackers' request.","causal_attribution":"Meta's account of its own system. TechCrunch's description of the chatbot as complying with the request is a reporter's characterisation from the attackers' videos and does not test where in Meta's system the check failed."},{"id":"c6","status":"reported","evidence":[{"locator":"Date(s) Breach Occured: 04/17/2026","relation":"supports","source_id":"s2"},{"locator":"Date Breach Discovered: 05-31-2026","relation":"supports","source_id":"s2"},{"locator":"May 31, 2026, Meta discovered that there was a vulnerability in an AI-assisted account","relation":"supports","source_id":"s1"},{"locator":"same day the exploitation was identified by Meta, the following actions were taken to","relation":"supports","source_id":"s1"},{"locator":"the AI-assisted support tool removing the vulnerable code path from production","relation":"supports","source_id":"s1"}],"assertion":"Meta's notice lists 17 April 2026 as the date the breach occurred (as 04/17/2026) and 31 May 2026 as the date it discovered the vulnerability, and says Meta disabled the AI-assisted support tool on the same day the exploitation was identified.","causal_attribution":"Meta's own dates for its own system. The notice letter gives the discovery date and no start date. The 17 April date appears only in the listing form, and the basis for it is not stated."},{"id":"c7","status":"reported","evidence":[{"locator":"Total number of persons affected (including residents): 20225","relation":"supports","source_id":"s2"},{"locator":"Total number of Maine residents affected: 30","relation":"supports","source_id":"s2"},{"locator":"reset through the support tool, did not have 2FA enabled on their account and whose Instagram accounts were likely accessed by an unauthorized party.","relation":"supports","source_id":"s1"},{"locator":"This number represents an upper bound of the users impacted as some of the accounts may have been accessed legitimately by account owners.","relation":"supports","source_id":"s1"}],"assertion":"The Maine Attorney General listing of Meta's submission gives 20225 as the total number of persons affected and 30 as the number of Maine residents. The notice defines the Maine figure as users whose passwords were reset through the tool, who had no two-factor authentication and whose accounts were likely accessed by an unauthorized party, and calls it an upper bound because some accounts may have been accessed legitimately by their owners.","causal_attribution":"Meta's own estimate. The notice's upper-bound wording is written for the Maine figure. The inspected notice does not say whether the total of 20225 counts accounts or people, how many were taken over, or how many are organisational accounts."},{"id":"c8","status":"reported","evidence":[{"locator":"“The password got changed without my knowledge and I was getting different password reset attempts throughout yesterday,” said Wong.","relation":"supports","source_id":"s3"},{"locator":"And I got repeatedly logged out from the IG iOS app[.] Quite concerning.","relation":"supports","source_id":"s10"},{"locator":"it took about five to 10 minutes to reinstate her account","relation":"supports","source_id":"s9"},{"locator":"Wong, who previously worked at Meta as a security engineer, said in a post on X her Instagram password was \"changed without my knowledge\"","relation":"supports","source_id":"s7"}],"assertion":"Jane Manchun Wong, a security researcher and former Meta employee, posted on X that her Instagram password was changed without her knowledge, that she received password reset attempts and was repeatedly logged out of the app, and told Reuters that reinstating her account took about five to ten minutes.","causal_attribution":"Her own public statements, relayed by four outlets. The X post itself was not opened. Wong does not say in the quoted statements how her account was accessed, and the outlets connect it to the exploit."},{"id":"c9","status":"reported","evidence":[{"locator":"and the account of the U.S. Space Force’s chief master sergeant","relation":"supports","source_id":"s4"},{"locator":"the account of the U.S. Space Force’s chief master sergeant","relation":"supports","source_id":"s3"},{"locator":"the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend","relation":"supports","source_id":"s6"},{"locator":"the Chief Master Sergeant of Space Force’s account","relation":"supports","source_id":"s5"}],"assertion":"TechCrunch and Krebs on Security report that the Instagram account of the U.S. Space Force's Chief Master Sergeant was compromised, and Krebs reports that it was briefly defaced with pro-Iranian images and messages.","causal_attribution":"Reporters' accounts based on screenshots the attackers posted. The account holder is not quoted in the inspected sources and is described here by office only. Whether the account is a personal or an official office account is not stated."},{"id":"c10","status":"reported","evidence":[{"locator":"including the Barack Obama White House account , the Chief Master Sergeant of Space Force’s account , and Sephora’s account","relation":"supports","source_id":"s5"},{"locator":"The Sephora corporate page and the account belonging to the Chief Master Sergeant of the U.S. Space Force were also hit.","relation":"supports","source_id":"s10"},{"locator":"The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced","relation":"supports","source_id":"s6"},{"locator":"The former US president's account reportedly posted pro-Iran content before it was recovered.","relation":"supports","source_id":"s7"},{"locator":"the dormant Obama White House account (which Meta disputed)","relation":"context","source_id":"s4"}],"assertion":"Outlets named the Sephora corporate account and a dormant Obama White House account among the compromised accounts, and Krebs and the BBC report that the Obama White House account was defaced with pro-Iran content. TechCrunch's 3 June report lists the Obama White House account among apparent victims with the parenthetical '(which Meta disputed)'. Both are organisational or institutional accounts and are not counted as affected persons.","causal_attribution":"Reporters' accounts. The Guardian, Gizmodo and Reuters name Sephora on the strength of 404 Media's reporting, so Sephora rests on one chain. TechCrunch does not say what Meta disputed about the Obama White House account. The BBC reports that Meta's spokesperson called claims that world leaders' accounts were hacked totally false."},{"id":"c11","status":"reported","evidence":[{"locator":"allowing the hacker to reset the target account’s password and take control of the account — in some cases locking out the victims.","relation":"supports","source_id":"s4"},{"locator":"locking users out of their accounts and prompting a wave of complaints on platforms including X and Reddit.","relation":"supports","source_id":"s9"},{"locator":"One X user wrote that they had been unable to find \"human support\" after their Instagram account was hacked.","relation":"supports","source_id":"s7"},{"locator":"Everyday users complained of similar hijackings on Reddit and X over the weekend.","relation":"supports","source_id":"s8"}],"assertion":"Some victims were reported locked out of their accounts, and one person wrote on X that they could not find human support after their Instagram account was hacked.","causal_attribution":"Reporters' summaries of complaints on X and Reddit. The individual posts were not opened and the complainants are not identified."},{"id":"c12","status":"reported","evidence":[{"locator":"TechCrunch has seen examples of allegedly hacked handles featuring common forenames or names of countries","relation":"supports","source_id":"s4"},{"locator":"(It’s important to note that it’s hard to know for sure if all these accounts were hacked due to the same technique.)","relation":"supports","source_id":"s4"},{"locator":"hijack a number of valuable (read: short) Instagram account names that allegedly have a resale value of more than a half million dollars.","relation":"supports","source_id":"s6"},{"locator":"404 Media has seen text files of huge lists of “OG,” or high-value, original usernames","relation":"context","source_id":"s5"}],"assertion":"Short Instagram handles were reported taken in the campaign and offered for resale. TechCrunch saw examples of allegedly hacked handles being advertised for sale and notes it is hard to know whether all were taken with this technique. Krebs reports that the attackers claimed the resale value of the short handles they took exceeded half a million dollars.","causal_attribution":"The resale and value claims come from attackers' Telegram posts as relayed by TechCrunch and Krebs. No sale was confirmed and the owners are not identified."},{"id":"c13","status":"reported","evidence":[{"locator":"\"This issue has been resolved and we are securing impacted accounts,\" Meta spokesperson Andy Stone told users in a statement on X","relation":"supports","source_id":"s7"},{"locator":"On Monday, Instagram spokesperson Andy Stone said in a reply to Wong’s post and others that the issue was now fixed.","relation":"supports","source_id":"s3"},{"locator":"Invalidated all existing password reset links that had been generated through the vulnerable path","relation":"supports","source_id":"s1"},{"locator":"potentially affected accounts into a mandatory security checkpoint requiring authentication before any account access","relation":"supports","source_id":"s1"},{"locator":"impacted users to reset their passwords and re-authenticate through secure, verified channels","relation":"supports","source_id":"s1"}],"assertion":"A Meta spokesperson said on X on 1 June 2026 that the issue was resolved and Meta was securing impacted accounts. Meta's notice says that it disabled the tool, invalidated existing password reset links generated through the vulnerable path, enrolled potentially affected accounts in a mandatory security checkpoint and told impacted users to reset their passwords.","causal_attribution":"Meta's statements about its own response. TechCrunch reports that the response did not end the reports (see c14)."},{"id":"c14","status":"reported","evidence":[{"locator":"On Tuesday, however, more Instagram users claimed to have had their accounts hacked.","relation":"supports","source_id":"s4"},{"locator":"who claimed to still be able to exploit Meta’s AI chatbot, and they were advertising apparently hacked handles for sale","relation":"supports","source_id":"s4"}],"assertion":"TechCrunch reported on 3 June 2026 that more Instagram users claimed to have had accounts hacked after Meta said the issue was resolved, and that members of a Telegram channel claimed they could still exploit the chatbot.","causal_attribution":"Claims by users and Telegram members as relayed by TechCrunch. The claims were not verified, and Meta's notice says the tool was disabled on 31 May 2026."}],"effects":[{"label":"A named security researcher reported that her Instagram password was changed without her knowledge and that she was logged out, and she told Reuters the account was reinstated in about five to ten minutes","claim_id":"c8","direction":"negative"},{"label":"The Instagram account of the U.S. Space Force's Chief Master Sergeant was reported compromised and briefly defaced with pro-Iranian content","claim_id":"c9","direction":"negative"},{"label":"Some account holders were reported locked out of their Instagram accounts, and one reported being unable to reach human support","claim_id":"c11","direction":"negative"},{"label":"Short Instagram handles were reported taken and offered for resale on Telegram","claim_id":"c12","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.maine.gov/cgi-bin/agviewerad/ret?loc=4169","kind":"regulatory_filing","access":"read","language":"en","translation_note":"Notice PDF read directly. Its text layer separates words with U+200B characters and detaches the first letter of some paragraphs, so locators from this source are given with those characters read as spaces.","independence_group":"meta-own-statements"},{"id":"s2","url":"https://web.archive.org/web/20260609035813id_/https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/686120c8-63be-4e3c-b7ed-466d65b672f5.html","kind":"official_record","access":"read","language":"en","translation_note":"","independence_group":"meta-own-statements"},{"id":"s3","url":"https://techcrunch.com/2026/06/01/hackers-hijacked-instagram-accounts-by-tricking-meta-ai-support-chatbot-into-granting-access/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s4","url":"https://techcrunch.com/2026/06/03/instagram-is-alerting-users-who-were-targeted-by-hackers-during-ai-chatbot-attacks/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s5","url":"https://www.404media.co/hackers-simply-asked-meta-ai-to-give-them-access-to-high-profile-instagram-accounts-it-worked/","kind":"news_report","access":"read","language":"en","translation_note":"Read through an Internet Archive capture of 1 June 2026 (20260601172133) because the live page is paywalled. The capture carries the full article.","independence_group":"attacker-posted-videos"},{"id":"s6","url":"https://krebsonsecurity.com/2026/06/hackers-used-metas-ai-support-bot-to-seize-instagram-accounts/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s7","url":"https://www.bbc.com/news/articles/c98rzr72dpyo","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s8","url":"https://www.theguardian.com/technology/2026/jun/01/meta-ai-hack-obama-sephora-instagram","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s9","url":"https://insideretail.us/how-the-sephora-instagram-hack-exposed-metas-ai-weakness/","kind":"wire_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s10","url":"https://gizmodo.com/hackers-tricked-meta-ai-into-handing-out-access-to-major-instagram-accounts-2000766087","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s11","url":"https://gizmodo.com/meta-says-thousands-of-instagram-accounts-were-breached-through-its-ai-support-assistant-2000768770","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"meta-own-statements"},{"id":"s12","url":"https://about.fb.com/news/2026/03/boosting-your-support-and-safety-on-metas-apps-with-ai/","kind":"official_statement","access":"read","language":"en","translation_note":"","independence_group":"meta-own-statements"}],"version":1,"ai_roles":["others_use","institutional_use"],"contexts":["privacy","everyday_life"],"unknowns":["How many people or organisations lost control of an account is not established. Meta's listing gives 20225 persons affected and the notice calls the Maine figure an upper bound, and the notice does not say how many accounts were organisational or how many were taken over.","Meta says it is unaware of what, if any, personal information was accessed. Whether any messages or data were read is unknown.","The start date rests on Meta's listing (17 April 2026), and the notice does not state its basis. 404 Media quotes a Telegram channel documenting the hack saying the exploits were 'getting abused after quietly working for months', and separately says that the same account originally posted in Telegram about the vulnerability 'at the end of March' (the year is not stated). Neither statement gives a start date for exploitation. Meta's announcement of 19 March 2026 says the support assistant was previewed 'in December' (year not stated in the passage) and that help with logging in was starting in select cases in the US and Canada, so no inspected source establishes the earliest date of exploitation.","The end date is Meta's date for disabling the tool (31 May 2026). TechCrunch reported unverified claims of continued exploitation on 3 June 2026.","The X posts, the Telegram videos and the Reddit complaints were not opened. Reporters' descriptions of them are used.","The notice does not say how many accounts were restored to their owners, and the listing shows 19 June 2026 as the date of consumer notification in a capture taken on 9 June 2026.","Figures of about 34,000 accounts targeted and a SimpliSafe account appeared only on an aggregator page that attributes the first figure to Meta without a citation and are not used."],"geography":{"basis":"Meta's notice to the Maine Attorney General counts 30 Maine users among those potentially impacted. The countries of the other affected people, the attackers (who reportedly used VPNs to appear in the target's location) and Meta's systems are not stated in the inspected sources, and the country of the named security researcher is not stated.","court_countries":[],"event_countries":[],"affected_person_countries":["US"]},"publication":{"basis":"Meta's notice to the Maine Attorney General (a PDF read directly) and the Maine listing (an archived capture) document Meta's own account of the exploited AI-assisted tool, the dates and the affected count. Nine news reports and Meta's March announcement were read in full. The mechanism claim has two independent chains (Meta's filing and attacker-posted videos checked by TechCrunch). Harm to named account holders rests on their own statements or on reporters relaying attacker-posted screenshots, so those claims stay at reported status. Only one account holder who spoke publicly is named. The office holder is described by office only.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"Meta's notice to the Maine Attorney General describes the affected system as an AI-assisted account recovery system (High Touch Support) and says it sent a password reset link to an email address not associated with the account. TechCrunch reports that no Meta employee or contractor took part in the exploit chats and checked one attacker mailbox for the code. Meta says the tool worked as intended, that the failure was a bug in a separate code path that did not verify the email address, and (to Gizmodo) that the failure was not due to the AI agent itself. Whether the AI component or the separate code path caused the failure is disputed and was not tested.","status":"supported"},"person_relations":["made_decision_about"]},"name":"Third parties exploit Meta's AI-assisted Instagram account recovery tool to reset passwords, with account takeovers reported (17 April to 31 May 2026)","summary":"Meta announced the rollout of its AI support assistant on Facebook and Instagram on 19 March 2026. Meta's filing with the Maine Attorney General (notice dated 5 June 2026) says unauthorized third parties exploited a vulnerability in its AI-assisted Instagram account recovery tool (High Touch Support) to receive password reset links for accounts they did not own, and the listing gives 17 April 2026 as the breach date and 31 May 2026 as the discovery date. Videos that attackers posted, as described by TechCrunch, 404 Media and Krebs on Security, show attackers asking the assistant in a chat to link a new email address to a target username. Reported victims include the security researcher Jane Manchun Wong, who posted that her password was changed without her knowledge, the Instagram account of the U.S. Space Force's Chief Master Sergeant, and the accounts of Sephora and a dormant Obama White House page (TechCrunch marks the last as disputed by Meta). Krebs and the BBC report pro-Iran defacement of some accounts, and TechCrunch reports that some victims were locked out and that short handles were offered for resale. The filing gives 20225 persons affected in total and 30 in Maine, and the notice calls the Maine figure an upper bound. Meta says the tool worked as intended, that a bug in a separate code path failed to check the email address, and (through a spokesperson to Gizmodo) that the failure was not due to the AI agent itself. Meta says it disabled the tool on 31 May 2026, the day it discovered the exploitation.","incidentDate":"2026-04-17","incidentEndDate":"2026-05-31","incidentKind":"bounded_series","incidentDatePrecision":"range","exposurePattern":"unknown","reportedDate":"2026-06-01","aiSystem":"Meta AI support assistant / High Touch Support (AI-assisted Instagram account recovery tool)","aiProduct":"Meta AI support assistant","aiCompany":"Meta","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm","reputational_harm"],"harmOutcomeSummary":"Reporters and Meta's notice report that third parties reset passwords on Instagram accounts and, where the account had no two-factor authentication, could log in. A named security researcher reports her password was changed without her knowledge and that reinstating the account took about five to ten minutes. Krebs on Security and the BBC report that some high-profile accounts were briefly defaced, TechCrunch reports that some victims were locked out and that short handles were offered for resale, and Meta says it does not know what personal information, if any, was accessed. Meta's filing gives 20225 persons affected in total, and its notice calls the Maine figure an upper bound.","frameworkFacets":[],"causationStatus":"disputed","participantUsersAffectedMin":0,"otherPeopleHarmedMin":2,"affectedCountStatus":"partial","affectedCountEvidence":"Two account holders are counted: the security researcher who posted that her account was taken over, and the office holder whose Instagram account TechCrunch and Krebs on Security report as compromised. TechCrunch's 3 June article says this account 'appeared to be' among the victims, no statement from the office holder or from Meta about this account was inspected, and whether it is a personal or an official account is not stated. Sephora and the Obama White House account are organisational or institutional accounts and are not counted. Other victims (everyday users, short-handle holders) are unquantified. Meta's listing of 20225 persons affected is not counted: the notice calls the Maine figure an upper bound and does not say how many accounts were taken over or how many were organisational.","victimAgeRange":"unknown","platformType":"assistant","primarySourceUrl":"https://www.maine.gov/cgi-bin/agviewerad/ret?loc=4169","primarySourceLabel":"Meta incident notification to the Maine Attorney General (5 June 2026)","firstPublishedAt":"2026-09-29T21:16:54.181323+00:00","updatedAt":"2026-09-30T01:17:45.477765+00:00","scopeVersion":"facts-v3","tags":["historical-2026"]},{"id":"2026-facebook-video-selfie-face-scan-failed-account-lockout-first-person","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'My 5-year-old account got hit with a random security check.'; 'The app asked for a video face scan, but it failed completely.'; 'my face and physical definition have changed a lot'; 'The AI simply didn't recognize me.'","relation":"supports","source_id":"s1"}],"assertion":"The poster's five-year-old Facebook account was put through a security check that asked for a video face scan, and the scan failed; the poster attributes this to changes in their appearance and says the AI did not recognise them.","causal_attribution":"Poster's account and attribution; no messages from Facebook were published."},{"id":"c2","status":"reported","evidence":[{"locator":"'Then it asked for ID.'; 'I use a shortened nickname on my profile for basic privacy'; 'the automated system instantly rejected my government ID for a name mismatch'","relation":"supports","source_id":"s1"}],"assertion":"Facebook then asked for ID, and an automated system rejected the poster's government ID because the profile uses a shortened nickname.","causal_attribution":"Poster's account; the post does not say the ID check used AI."},{"id":"c3","status":"reported","evidence":[{"locator":"'It’s pretty gutting.'; 'locked out of years of memories, friends, and active Marketplace listings'; 'a way to bypass the lock screen to download my archive data and photos'; 'hoping someone here has navigated this specific deadlock or found a way to reach a human'","relation":"supports","source_id":"s1"}],"assertion":"The poster says they are locked out of years of memories, friends and active Marketplace listings, describes the loss as gutting, and is seeking a way to reach a human reviewer or download their data.","causal_attribution":"Poster's own statement of the effect."},{"id":"c4","status":"documented","evidence":[{"locator":"'The user will upload a video selfie and we’ll use facial recognition technology to compare the selfie to the profile pictures on the account they’re trying to access.'","relation":"supports","source_id":"s2"}],"assertion":"Meta says that, when people verify their identity with a video selfie to regain access to a compromised account, it uses facial recognition technology to compare the selfie with the profile pictures on the account.","causal_attribution":"General product description by Meta; it does not establish how this check was decided."}],"effects":[{"label":"locked out of a five-year-old account with years of photos, contacts and active Marketplace listings","claim_id":"c3","direction":"negative"},{"label":"distress at the loss ('pretty gutting')","claim_id":"c3","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.reddit.com/r/facebook/comments/1wsrvdh/lost_my_5year_account_after_military_personal/","kind":"forum_post","access":"read","language":"en","translation_note":"Read in English on 2026-09-29: full self-text retrieved through the arctic_shift archive API by post ID. The poster handle is not recorded.","independence_group":"reddit-facebook-facescan-poster"},{"id":"s2","url":"https://about.fb.com/news/2024/10/testing-combat-scams-restore-compromised-accounts/","kind":"company_blog","access":"read","language":"en","translation_note":"Meta newsroom post first published 21 October 2024 with later updates, fetched 2026-09-29 (200). Describes the feature in general; it does not address this account.","independence_group":"meta-newsroom"}],"version":1,"ai_roles":["institutional_use"],"contexts":["everyday_life","privacy"],"unknowns":["The date of the security check and the poster's location.","Why the security check was triggered and whether a human reviewed the face scan or the ID.","Whether the poster regained access or obtained a data download."],"geography":{"basis":"The post says only 'Where I live' without naming a place; the comments add nothing. Unknown after review.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Published under the 2026-09-15 charter's public-forum rule as a concrete first-person account of a Facebook video face-scan security check, which the poster describes as AI, failing to recognise them and, with an ID rejection, locking them out of their account; described with attribution and without corroboration. Meta's own description of video-selfie verification is cited as context only. Personal circumstances the poster gives for their changed appearance are summarised, not reproduced. No handle is recorded.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"The poster says a video face scan in Facebook's security check failed and that 'The AI' did not recognise them. Meta's newsroom documents that video selfies used to recover compromised accounts are compared with profile pictures using facial recognition, without saying whether a human reviews the result or covering routine security checks; the ID rejection is attributed by the poster to an 'automated system' and is not established as AI.","status":"reported"},"person_relations":["made_decision_about"]},"name":"First-person forum account: a Facebook user says a video face-scan security check failed to recognise them after their appearance changed, an automated ID check then rejected their government ID over a nickname, and they were locked out of a five-year-old account","summary":"In a public post to r/facebook on 28 September 2026, a user writes that their five-year-old Facebook account was hit with a security check that asked for a video face scan, which 'failed completely'. They say their face had changed a lot through recent life circumstances and 'The AI simply didn't recognize me.' Facebook then asked for ID, and 'the automated system instantly rejected' their government ID because their profile uses a shortened nickname. The poster says they are locked out of years of memories, friends and active Marketplace listings and are looking for a way to reach a human or download their data. Meta has said that video selfies used to regain access to compromised accounts are compared with the account's profile pictures using facial recognition; whether this check worked that way is not known. The account is uncorroborated.","incidentKind":"single_event","incidentDatePrecision":"unknown","exposurePattern":"single_interaction","reportedDate":"2026-09-28","aiSystem":"Facebook's video face-scan security check (Meta describes video-selfie verification for account recovery as using facial recognition technology); the specific system is not named in the post","aiProduct":"Facebook video face-scan check","aiCompany":"Meta","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["other_material_harm","psychological_distress"],"harmOutcomeSummary":"The poster reports that a Facebook video face-scan check failed to recognise them and an automated ID check rejected their ID over a nickname, locking them out of a five-year-old account with years of photos, contacts and active Marketplace listings, which they describe as 'pretty gutting' (first-person account, uncorroborated).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person: the poster, locked out of their own account. Commenters describing their own lockouts are not counted. Exact 1.","victimAgeRange":"adult","jurisdiction":"unknown","platformType":"other","outcomeStatus":"ongoing","primarySourceUrl":"https://www.reddit.com/r/facebook/comments/1wsrvdh/lost_my_5year_account_after_military_personal/","primarySourceLabel":"r/facebook, 28 September 2026: public first-person post about a failed AI face scan and an ID rejected over a nickname (title shortened)","firstPublishedAt":"2026-09-29T03:21:50.784414+00:00","updatedAt":"2026-09-30T01:17:37.118566+00:00","scopeVersion":"facts-v3","tags":["first-person","reddit","facebook","meta","facial-recognition","video-selfie","account-lockout","identity-verification","made-decision-about"]},{"id":"2026-newby-adelphi-ai-detector-vacated","caseFacts":{"claims":[{"id":"c1","status":"corroborated","evidence":[{"locator":"'In November 2024, Newby submitted a paper on Christianity and Islam'; 'Oelze gave the paper a grade of zero, according to court filings, in part because he thought it was AI-generated'; 'According to the lawsuit, Adelphi relied in part on AI detection software'; 'Turnitin's AI detector marked the essay as fully AI-written, but Newby ran it through two other detectors that said it was written by a human, court records show'.","relation":"supports","source_id":"s1"},{"locator":"'Adelphi University says an AI detection software flagged 19-year-old Orion Newby's work and claims the paper was \"too advanced\" for the first-year student'; 'That paper earned him a zero'.","relation":"supports","source_id":"s2"}],"assertion":"In November 2024 Newby submitted a paper on Christianity and Islam for the fall 2024 World Civilizations 1 class; the professor graded it zero in part because he thought it was AI-generated, and Adelphi, per the lawsuit, relied in part on AI-detection software — court records show Turnitin's detector marked the essay as fully AI-written while two other detectors scored it human.","causal_attribution":"The detector results and the lawsuit's contents are attributed to court filings as carried by Newsday; the professor's suspicion is attributed to court filings and ABC7."},{"id":"c2","status":"corroborated","evidence":[{"locator":"'University officials ordered Newby to attend a plagiarism workshop — which, while considered a \"nondisciplinary\" punishment, could have resulted in suspension or expulsion if he was found to have committed a second offense'; 'The university's denial of Newby's appeal left the family \"no choice\" but to sue'.","relation":"supports","source_id":"s1"},{"locator":"'Adelphi told him he had to take an anti-plagiarism course, and until he did, he couldn't enroll in other classes. That's when his family sued.'","relation":"supports","source_id":"s2"}],"assertion":"Newby was ordered to attend a plagiarism workshop — a 'nondisciplinary' punishment that could have led to suspension or expulsion on a second offense — was told he could not enroll in other classes until he complied, and his appeal was denied; the family sued in October 2025.","causal_attribution":"Both chains independently carry the workshop order and the enrollment block (Newsday from the ruling stage, ABC7 from the filing stage)."},{"id":"c3","status":"documented","evidence":[{"locator":"'state Supreme Court Judge Randy Sue Marber in Nassau County wrote on Jan. 28. The school must expunge his record, the judge ruled'; 'were \"without valid basis and devoid of reason\"'.","relation":"supports","source_id":"s1"},{"locator":"Inside Higher Ed's relay describes a 'federal judge' — erroneous; Judge Marber's state Supreme Court decision controls.","relation":"contradicts","source_id":"s3"}],"assertion":"On 28 January 2026, New York State Supreme Court Judge Randy Sue Marber in Nassau County ruled that Adelphi's finding and its denial of his appeal were 'without valid basis and devoid of reason' and ordered the school to expunge his record.","causal_attribution":"The ruling is documented by Newsday's report quoting the decision; the IHE forum error is recorded explicitly. The decision text itself was not fetched (Newsday's account is the inspected record)."},{"id":"c4","status":"corroborated","evidence":[{"locator":"'treated since he was about 2 years old for learning and neurological disabilities that include language and auditory processing disorders and attention deficit hyperactivity disorder'; 'He had worked on it with a tutor from Bridges to Adelphi, the university's $5,000-a-semester program'.","relation":"supports","source_id":"s1"},{"locator":"'Newby has learning differences... issues specifically with language processing. At Adelphi, he's in a special program with extra support'; 'I told him I worked 15 to 20 hours with tutors'.","relation":"supports","source_id":"s2"}],"assertion":"Newby has been treated since about age two for learning and neurological disabilities — language and auditory processing disorders and ADHD — and wrote the paper with a tutor from Bridges to Adelphi, the university's own $5,000-a-semester disability-support program, working 15-20 hours with tutors.","causal_attribution":"The disability and support details come from his mother's and his own accounts, carried by both chains."},{"id":"c5","status":"reported","evidence":[{"locator":"'The family has spent six figures on legal costs, she said'; Lesko passages ('bellwether example'; 'I can't tell you how many parents have reached out to us with similar issues').","relation":"supports","source_id":"s1"}],"assertion":"The family spent six figures on legal costs; attorney Mark Lesko called the ruling a 'bellwether example' and said many parents had contacted him with similar issues.","causal_attribution":"The mother's and the attorney's accounts; the 'many parents' figure is unquantified and no other persons are counted."}],"effects":[{"label":"false AI-plagiarism accusation with academic and financial consequences until a court ordered expungement","claim_id":"c2","direction":"negative"},{"label":"recovery: court cleared his record; he continues at Adelphi as a second-year history major","claim_id":"c3","direction":"positive"}],"sources":[{"id":"s1","url":"https://www.newsday.com/long-island/education/adelphi-university-ai-plagiarism-lawsuit-oh07enyz","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-09-15 (datePublished 2026-02-09T10:00Z; 48 paragraphs).","independence_group":"newsday"},{"id":"s2","url":"https://abc7ny.com/post/adelphi-student-long-island-sues-university-allegations-he-used-ai-write-essay/17980409/","kind":"local_tv_news","access":"read","language":"en","translation_note":"Read in English on 2026-09-15 (datePublished 2025-10-10T20:54Z).","independence_group":"abc7"},{"id":"s3","url":"https://www.insidehighered.com/news/quick-takes/2026/02/11/adelphi-student-wins-ai-plagiarism-lawsuit","kind":"trade_press_relaying_newsday","access":"read","language":"en","translation_note":"Read in English on 2026-09-15 (2026-02-11). Relays Newsday; its 'federal judge' phrase is erroneous — Judge Marber sits in the state Supreme Court, and the claim records the discrepancy.","independence_group":"newsday"}],"version":1,"ai_roles":["institutional_use"],"contexts":["education","justice","accessibility"],"unknowns":["The decision text was not fetched; the ruling is recorded through Newsday's account quoting the judge.","The similarity scores Turnitin returned and the university's full decision letter are not public in the inspected sources.","Whether Adelphi changed its AI-detection or appeals policies afterward is not reported.","The first-person Times account (28 Aug 2026) is paywalled and was not inspected; his later reflections are therefore not claimed.","The workshop's completion status after the ruling (moot after expungement) is not reported."],"geography":{"basis":"Event: Adelphi University, Garden City, New York. Affected person: Newby, a student there living in Lido Beach, NY. Court: New York State Supreme Court, Nassau County.","court_countries":["US"],"event_countries":["US"],"affected_person_countries":["US"]},"publication":{"basis":"Published under the 2026-09-15 charter as an institutional automated-decision case (made_decision_about / made_claim_about): a detector-driven false accusation with court-vacated sanctions. Newby and his parents spoke publicly; his disability is recorded because it is central to the case's facts (the university's own support program produced the writing process the detector misread), not as a label.","reviewed_on":"2026-09-15"},"ai_involvement":{"basis":"The lawsuit records that Adelphi relied in part on AI-detection software; court records show Turnitin's detector marked the essay as fully AI-written while two other detectors scored it human (Newsday). The university's process, not the tool alone, produced the sanction — recorded in the harm mechanism.","status":"supported"},"person_relations":["made_decision_about","made_claim_about"]},"name":"Adelphi accused Orion Newby of AI plagiarism after a detector flagged his paper; a Nassau County judge ordered the finding expunged","summary":"Orion Newby, an Adelphi University first-year student with language and auditory processing disabilities, received a zero in November 2024 on a World Civilizations paper after the professor suspected it was AI-generated and the university relied in part on AI-detection software; he was ordered to attend a plagiarism workshop and his appeal was denied, leaving him one finding from suspension or expulsion. Newby — who had written the paper with 15-20 hours of tutor support through the university's own disability program — said the detectors flagged his citations, and two other detectors scored the paper as human. After the family sued, New York State Supreme Court Judge Randy Sue Marber in Nassau County ruled on 28 January 2026 that Adelphi's finding and its denial of his appeal were 'without valid basis and devoid of reason' and ordered his record expunged. The family spent six figures on legal costs.","incidentDate":"2024-11-01","incidentEndDate":"2026-01-28","incidentKind":"bounded_series","incidentDatePrecision":"range","exposurePattern":"single_interaction","reportedDate":"2025-10-10","aiSystem":"Turnitin AI-detection software (and the university's reliance on it)","aiProduct":"Turnitin AI-text detector","aiCompany":"Turnitin","severity":"medium","verificationStatus":"verified","harmCategories":[],"harmOutcomes":["educational_harm","financial_loss","psychological_distress"],"harmOutcomeSummary":"A false AI-plagiarism finding brought a zero, a plagiarism-workshop order one step from suspension, sleepless nights, and a year-plus fight costing six figures to clear his record — despite two other detectors scoring the paper human and the writing help coming from the university's own disability program.","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"exact","affectedCountEvidence":"One documented harmed person: Newby, the subject of the detector-driven accusation (court ruling and Newsday/ABC7 reporting). Other students mentioned by his attorney ('many parents have reached out') are unquantified and not counted.","victimAgeRange":"adult","jurisdiction":"US","platformType":"other","outcomeType":"lawsuit_filed","outcomeStatus":"resolved","primarySourceUrl":"https://www.newsday.com/long-island/education/adelphi-university-ai-plagiarism-lawsuit-oh07enyz","primarySourceLabel":"Newsday (9 Feb 2026) — the ruling, the judge's words, the family and attorney accounts, the disability and Bridges program detail","firstPublishedAt":"2026-09-15T09:31:23.493757+00:00","updatedAt":"2026-09-30T01:17:46.697576+00:00","scopeVersion":"facts-v3","tags":["made-decision-about","made-claim-about","ai-detector","turnitin","education","disability","court-win","new-york"]}]}