Reporting in June 2026 described an attack where someone could ask Meta's AI support assistant to add a new email to a target's account — and the bot would send the reset code to the attacker, who then took the account over.

Victims reported there was no human at Meta to escalate to once it happened. This is an editorial summary of that reporting, not a verified individual case.