The company says it was an “unacceptable error” and disabled the feature and launched an investigation.