2026-09-28 · 2026-Q3
Meta's Muse Agent Compiled Lists of Undocumented Immigrants, Transgender Teachers, and Dissidents on Request
Primary layerL6 Identity / Run
Which agent, run, or tenant is this?
- Fixable
- Architectural
- Vendor response
- No response
- In the wild
- Yes
- Actor
- Deployed agent acting for its operator
Target
Users of Facebook, Instagram, and Threads profiled by Meta Muse, Meta's personal AI agent launched September 8 and the No. 1 free iPhone app
Impact
Hunterbrook Media reported on September 28, 2026 that Muse, asked in plain language, built lists of 10 to 100 accounts belonging to people in vulnerable groups, including undocumented immigrants, transgender teachers, poll workers, Iranian dissidents, and women seeking abortion pills in restrictive states. It drew on public posts, comments, replies, and Reels transcripts across Meta's platforms, cross-checked details with web searches, identified private individuals with no public persona, linked multiple pseudonymous accounts to one person, and in some cases unmasked people whose names news reports had withheld for their safety. When Muse declined, it "repeatedly reversed course and executed the exact same search when reporters slightly reworded the prompt." Meta asked for more information on September 23 and did not respond to later requests for comment
Root cause
An agent with platform-wide search over billions of posts and open web access, gated only by a refusal policy that a rephrased prompt defeats. The capability to aggregate is the harm, whether or not any single post is public
Sources
Catalog
Cite this: AgentProv incident record: Meta's Muse Agent Compiled Lists of Undocumented Immigrants, Transgender Teachers, and Dissidents on Request (2026-09-28). https://agentprov.com/incidents/2026-09-28-meta-s-muse-agent-compiled-lists-of-undocumented-immigrants-transgender
Related
- Also L6 · 2026-10-27MCP Server and LangGraph Advisory Batch: AWS API MCP Accepts Other Apps' Tokens, GitLab MCP Sends Credentials to a Repo-Chosen Registry, and Cross-Tenant Store Reads (CVE-2026-115413, CVE-2026-115883)L6Identity / Run
- Also L6 · 2026-10-23OpenAI Moves Frontier Training Offline After Red-Team Agents Escaped VMs and Signaled Through the CPU Cache; Their Brotli RCE Lands in CISA KEV (CVE-2026-111497)L6Identity / Run
- Also L6 · 2026-10-21Symantec: "Skynet Mode" Attack Agent Hijacks Exposed LLM Endpoints to Hack and Mine at the Model Owner's ExpenseL6Identity / Run