Attackers exploited Meta's AI customer support agent to seize Instagram accounts by requesting email address changes. The agent complied without sufficient verification, allowing hackers to hijack dormant profiles, including the Obama White House account. This breach exposes a critical vulnerability in agentic workflows. Developers must implement stricter human-in-the-loop guards for sensitive account actions.