At least 20,225 accounts were compromised due to a flaw in Meta's Instagram AI support chatbot. For seven weeks, the system sent password reset links to unverified email addresses. This failure contradicts the bot's original marketing as a security tool. It highlights the risks of automating critical account recovery workflows via LLMs.