{"meta":{"exportedAt":"2026-10-24T07:30:54.804Z","formatVersion":2,"selection":{"q":"account-takeover","system":"","harm":"","context":"","country":"","role":"","relation":"core","evidence":"","year":"unknown","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":1,"coverage":{"cases":1,"countries":0,"languages":1,"unknownLocation":1,"locationPending":0,"unknownLanguage":0,"unknownDate":1,"lawsuits":0,"regulatory":0,"minors":0,"coreRelations":1,"contextualRelations":0,"mixedRelations":0,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2026-spanish-singer-says-chatgpt-recommended-a-download-page-whose-malware-stole-his-gmail-and-youtube-channel","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"CHATGPT (sí, ChatGPT) me recomendó en mi búsqueda de un descargable de DLSS5, una página que contenía MALWARE","relation":"supports","source_id":"s1"},{"locator":"Cepeda andaba buscando un descargable de DLSS5, un archivo habitual entre jugadores de PC, y tiró de ChatGPT para que le orientara. La respuesta le llevó a una página con malware.","relation":"supports","source_id":"s2"}],"assertion":"The singer says ChatGPT, in answer to his search for a DLSS5 download, recommended a page that contained malware.","causal_attribution":"His own account, quoted by Marca and summarised by Que.es; both relay the same open letter."},{"id":"c2","status":"reported","evidence":[{"locator":"al ejecutar el programa que ChatGPT me recomendó, me robaron la cuenta principal de Gmail, cambiando la fecha de nacimiento, poniendo un control parental y cambiando TODA forma de recuperar la cuenta","relation":"supports","source_id":"s1"}],"assertion":"He says running the program led to the theft of his main Gmail account, with its birth date, parental controls and recovery options changed.","causal_attribution":"His own account."},{"id":"c3","status":"reported","evidence":[{"locator":"Ese mail a parte de ser el de YouTube también era el mail de Stripe, el mail de Coinbase","relation":"supports","source_id":"s1"}],"assertion":"He says that email account was also the one for YouTube, Stripe and Coinbase.","causal_attribution":"His own account; no loss from those services is reported."},{"id":"c4","status":"reported","evidence":[{"locator":"se quedó sin acceso al canal donde están colgados todos sus videoclips. El canal aparece ahora bajo el nombre 'Nvidia (live)', tal y como él mismo ha explicado.","relation":"supports","source_id":"s2"}],"assertion":"He says he lost access to his official YouTube channel, which Que.es reports now appears under the name \"Nvidia (live)\".","causal_attribution":"His own account as summarised by Que.es."},{"id":"c5","status":"reported","evidence":[{"locator":"Normalmente no caigo y analizo bien lo que ejecuto pero coño, es una página recomendada por ChatGpt y caí.","relation":"supports","source_id":"s1"}],"assertion":"He says he normally analyses what he runs but fell for it because ChatGPT had recommended the page.","causal_attribution":"His own account of his reliance on the recommendation."},{"id":"c6","status":"reported","evidence":[{"locator":"ya mandé el formulario que he tenido que gestionar tras largas horas con Virgin Music. Solo quiero desahogarme porque me parece LAMENTABLE vuestro sistema de recuperación de cuentas","relation":"supports","source_id":"s1"}],"assertion":"He criticised YouTube and Google for having no human contact for account recovery and said he had sent the recovery form after long hours with Virgin Music.","causal_attribution":"His own account."}],"effects":[{"label":"main Gmail account taken over and recovery options changed (his account)","claim_id":"c2","direction":"negative"},{"label":"lost access to his official YouTube channel (his account)","claim_id":"c4","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.marca.com/tiramillas/musica/2026/10/21/cepeda-estalla-youtube-hackeo-canal-app-recomendada-chatgpt-me-parece-lamentable.html","kind":"news_report","access":"read","language":"es","translation_note":"Read in Spanish by the research agent (an AI) on 2026-10-24 from the Marca article page (HTTP 200); quotations were translated by the research agent, and no human translator or reviewer was involved. Marca quotes the singer's social-media open letter.","independence_group":"cepeda-social-media-open-letter-oct-2026"},{"id":"s2","url":"https://www.que.es/2026/10/22/cepeda-youtube-canal-bloqueado/","kind":"news_report","access":"read","language":"es","translation_note":"Read in Spanish by the research agent (an AI) on 2026-10-24 from the Que.es article page (HTTP 200), dated 22 October 2026 00:30; translated by the research agent, with no human translator or reviewer. Que.es summarises the same open letter.","independence_group":"cepeda-social-media-open-letter-oct-2026"}],"version":1,"ai_roles":["own_use"],"contexts":["work","privacy","everyday_life"],"unknowns":["When the conversation and the theft happened; the open letter is undated in the sources read beyond the reports of 21 and 22 October 2026.","What ChatGPT's answer said, which page and program were involved, and whether ChatGPT linked the page directly or named a site.","Whether any money was taken through the linked Stripe or Coinbase accounts.","Whether the Gmail account and YouTube channel have been recovered, and whether OpenAI or Google has responded."],"geography":{"basis":"The sources call him a Galician singer-songwriter but do not say where the theft happened; no country is recorded.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Published as a concrete account a public performer made himself: ChatGPT's recommendation of a download page that carried malware, which he says led to the theft of his Gmail account and loss of his YouTube channel. Two outlets relay the same open letter; the account is attributed and uncorroborated, and the conversation is not published.","reviewed_on":"2026-10-24"},"ai_involvement":{"basis":"The singer says that ChatGPT, asked about a DLSS5 download, recommended a page containing malware, and that running the program from it led to the theft of his main Gmail account and loss of his YouTube channel; he says he trusted the page because ChatGPT recommended it. The conversation is not published, so the recommendation rests on his account.","status":"reported"},"person_relations":["communicated_with"]},"name":"Spanish singer Luis Cepeda says a download page ChatGPT recommended carried malware that stole his Gmail account and his YouTube channel","summary":"In an open letter on his social media, reported by Marca on 21 October 2026 and by Que.es on 22 October, the Spanish singer Luis Cepeda said that while he was looking for a DLSS5 download, ChatGPT recommended a page that contained malware. He said that running the program it recommended led to the theft of his main Gmail account, whose birth date, parental controls and recovery options were changed, and that the account was also the email for his YouTube channel, Stripe and Coinbase. He said he had lost access to his official YouTube channel, which Que.es reports now appears under another name, and criticised YouTube and Google for offering no human contact for account recovery. He said he normally analyses what he runs but trusted a page ChatGPT had recommended. The account is his own; OpenAI has not commented in the sources read.","incidentKind":"single_event","incidentDatePrecision":"unknown","exposurePattern":"single_interaction","reportedDate":"2026-10-21","aiSystem":"ChatGPT, which the singer says recommended the download page in answer to his search for a DLSS5 download","aiProduct":"ChatGPT (reported)","severity":"medium","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["other_material_harm","professional_harm"],"harmOutcomeSummary":"The singer says a program from a page ChatGPT recommended carried malware that took his main Gmail account (also used for Stripe and Coinbase) and with it his official YouTube channel (his public account, uncorroborated).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person: the singer. Followers warned not to open uploads are not counted.","victimAgeRange":"adult","platformType":"other","outcomeStatus":"ongoing","primarySourceUrl":"https://www.marca.com/tiramillas/musica/2026/10/21/cepeda-estalla-youtube-hackeo-canal-app-recomendada-chatgpt-me-parece-lamentable.html","primarySourceLabel":"Marca, 21 Oct 2026: Cepeda criticises YouTube after his channel was hacked through an app ChatGPT recommended","firstPublishedAt":"2026-10-24T03:20:50.935065+00:00","updatedAt":"2026-10-24T03:20:50.935065+00:00","scopeVersion":"facts-v3","tags":["chatgpt","malware","account-takeover","youtube","spain"]}]}