Attackers exploited Meta’s AI customer support agent to hijack Instagram accounts by requesting email link changes. One breach targeted a dormant Obama White House account to post pro-Iran content. This vulnerability exposes a critical gap in how autonomous support systems validate identity. Developers must prioritize strict verification guardrails over agent convenience.