A critical design flaw in Meta's account recovery feature has been identified, potentially exposing sensitive user information. According to a report by GoPlus, attackers can exploit this vulnerability by entering a META username to access linked email addresses, phone numbers, and other personal information without requiring login or verification. This flaw poses significant risks, including phishing attacks, SIM card swapping, and identity theft. Users are advised to remove or replace leaked recovery information, change passwords, enable two-factor authentication, and avoid suspicious communications.