The FBI issued a public alert in August 2026 warning that cybercriminals are breaking into the social media accounts of adults and children to steal explicit images and videos, which are then used in extortion campaigns or published online without consent.
According to the advisory, attackers use several methods to gain access to victims’ accounts, including brute-forcing passwords using previously leaked credentials, impersonating customer service representatives from platforms like Instagram, and sending phishing emails through fake domains designed to mimic legitimate social media login pages.
Once they have stolen content, perpetrators use it to extort victims or harass them — in some cases advertising the stolen material directly on the victim’s own social media page. “Victims often face re-victimization through harassment, sextortion, stalking or other targeted attacks, such as advertising stolen content on a victim’s own social media page,” the FBI wrote in its alert.
Rachel Tobac, CEO of security awareness training firm SocialProof Security, told TechCrunch that the FBI’s public alert could suggest these incidents are on the rise. Tobac noted that young boys are a particular target and described the attacks as “a big public health issue,” adding that victims are sometimes driven to self-harm in response.
While these types of crimes are not new, the FBI’s decision to issue a formal public advisory may signal growing concern about their frequency and severity.
The FBI advises people to use unique passwords stored in a password manager, enable multi-factor authentication on all accounts, and treat any unsolicited contact from someone claiming to represent a social media company with suspicion, as tech companies generally do not reach out directly to users. The agency also urges people to avoid storing sensitive or intimate images in online accounts.
Source: TechCrunch