{"meta":{"exportedAt":"2026-10-02T17:28:24.665Z","formatVersion":2,"selection":{"q":"email","system":"","harm":"","context":"","country":"","role":"","relation":"contextual","evidence":"","year":"2026","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":3,"coverage":{"cases":3,"countries":3,"languages":2,"unknownLocation":1,"locationPending":0,"unknownLanguage":0,"unknownDate":0,"lawsuits":0,"regulatory":0,"minors":0,"coreRelations":0,"contextualRelations":3,"mixedRelations":0,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2026-bengaluru-ai-traffic-camera-guitar-bag-pillion-helmet-challan","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'One of the AI cameras installed on Outer Ring Road had captured him at noon on Sept 15'; 'was generated the next day'","relation":"supports","source_id":"s2"},{"locator":"'received an e-challan alleging that a pillion rider had violated the helmet rule'; 'what the AI camera had identified as a pillion rider was actually a guitar bag he was carrying on his back'; 'issued a Rs 500 fine for not wearing a helmet'","relation":"supports","source_id":"s1"},{"locator":"'পরদিন ১৬ সেপ্টেম্বর স্ত্রীর মোবাইলে আসা ই-চালানে'; 'তিনি একাই স্কুটার চালাচ্ছিলেন'","relation":"supports","source_id":"s3"}],"assertion":"After an AI camera on Bengaluru's Outer Ring Road captured the rider alone on the scooter at about noon on 15 September 2026, a ₹500 e-challan for a pillion rider without protective headgear was generated the next day, with a photograph showing the guitar bag on his back.","causal_attribution":"The rider's account and challan as reported; not inspected directly."},{"id":"c2","status":"reported","evidence":[{"locator":"'The photograph showed the bag in a position that apparently led the AI-based system to classify it as a person sitting behind the rider. The system then appears to have detected a helmet violation and generated the challan.'","relation":"supports","source_id":"s1"}],"assertion":"A senior traffic police officer said the bag's position apparently led the AI-based system to classify it as a person behind the rider, after which the system appears to have detected a helmet violation and generated the challan.","causal_attribution":"A police officer's explanation to Deccan Herald, hedged with 'apparently' and 'appears'."},{"id":"c3","status":"reported","evidence":[{"locator":"'Bengaluru Traffic Police (BTP) said the violation could be rectified'","relation":"supports","source_id":"s1"},{"locator":"'If found true, we will revoke the violation'","relation":"supports","source_id":"s2"}],"assertion":"Bengaluru Traffic Police said the violation could be rectified and directed the rider to email the details, and the joint commissioner of police (traffic) said the violation would be revoked if the complaint was found true.","causal_attribution":"Police responses as reported by each paper."},{"id":"c4","status":"reported","evidence":[{"locator":"'Bengaluru traffic police had adopted an AI-based surveillance system in Dec 2022 and run it without any human validation at the backend'; 'police decided to manually validate all violations raised by AI'","relation":"supports","source_id":"s2"}],"assertion":"Bengaluru Traffic Police adopted the AI-based surveillance system in December 2022, initially without human validation at the back end, and later decided to validate AI-raised violations manually.","causal_attribution":"Background reported by the Times of India; whether this challan passed manual validation is not stated."}],"effects":[{"label":"issued a ₹500 e-challan for a helmetless pillion passenger who did not exist","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.deccanherald.com/india/karnataka/bengaluru/ai-camera-mistakes-guitar-for-pillion-rider-in-bengaluru-issues-rs-500-helmet-fine-4160844","kind":"news_report","access":"read","language":"en","translation_note":"Read live in English on 2026-10-02 (Deccan Herald, 26 September 2026); carries its own quote from a senior traffic police officer.","independence_group":"deccan-herald-btp"},{"id":"s2","url":"https://timesofindia.indiatimes.com/city/bengaluru/ai-strums-wrong-tune-mistakes-guitar-for-helmetless-pillion-in-bengaluru/articleshow/134508809.cms","kind":"news_report","access":"read","language":"en","translation_note":"Read live in English on 2026-10-02 (Times of India, Bengaluru, 26 September 2026); carries its own comment from the joint commissioner of police (traffic).","independence_group":"toi-btp"},{"id":"s3","url":"https://zoombangla.com/%E0%A6%97%E0%A6%BF%E0%A6%9F%E0%A6%BE%E0%A6%B0%E0%A6%95%E0%A7%87-%E0%A6%B9%E0%A7%87%E0%A6%B2%E0%A6%AE%E0%A7%87%E0%A6%9F%E0%A6%AC%E0%A6%BF%E0%A6%B9%E0%A7%80%E0%A6%A8-%E0%A6%AF%E0%A6%BE%E0%A6%A4%E0%A7%8D/","kind":"news_report","access":"read","language":"bn","translation_note":"Read live in Bengali on 2026-10-02 (Zoom Bangla, 1 October 2026), a Bangladeshi rewrite of Indian reporting of the rider's post. Researcher translation.","independence_group":"rider-post-relay"},{"id":"s4","url":"https://banglascoop.com/37579","kind":"news_report","access":"read","language":"bn","translation_note":"Read live in Bengali on 2026-10-02 (BanglaScoop, 1 October 2026), which cites NDTV. Researcher translation.","independence_group":"rider-post-relay"}],"version":1,"ai_roles":["institutional_use"],"contexts":["public_services","justice","everyday_life"],"unknowns":["Whether the challan was revoked, paid or contested through the court.","Whether a human reviewer validated this challan before it was issued.","The vendor and name of the camera system."],"geography":{"basis":"The ride was from Hebbal towards Tin Factory in Bengaluru and the camera is on the Outer Ring Road; the challan was issued by Bengaluru Traffic Police (Deccan Herald; Times of India). No court proceeding.","court_countries":[],"event_countries":["IN"],"affected_person_countries":["IN"]},"publication":{"basis":"Published under the 2026-09-15 charter as a contextual case: an institution's AI system made a penalty decision about a person on the basis of a misclassified object. Two newspapers with separate police comments (Deccan Herald and the Times of India) report the challan; a senior traffic officer attributes the classification to the AI system. The rider is not named.","reviewed_on":"2026-10-02"},"ai_involvement":{"basis":"A senior traffic police officer told Deccan Herald that the bag's position apparently led the AI-based system to classify it as a person behind the rider and that the system appears to have detected a helmet violation and generated the challan. The Times of India attributes the capture to one of the AI cameras on the Outer Ring Road. The camera system is not named.","status":"supported"},"person_relations":["made_decision_about"]},"name":"Bengaluru: an AI traffic camera on the Outer Ring Road reportedly classified a guitar bag on a lone scooter rider's back as a helmetless pillion passenger and generated a ₹500 e-challan; a senior traffic officer said the system appears to have made the classification, and police offered rectification","summary":"On 15 September 2026 a man was riding his wife's electric scooter alone in Bengaluru, from Hebbal towards Tin Factory, wearing a helmet and carrying a guitar on his back. An AI-enabled Bengaluru Traffic Police camera on the Outer Ring Road photographed him, and the next day an e-challan of ₹500 was generated for a pillion rider not wearing protective headgear; the photograph attached to it showed no passenger, only the guitar bag. The rider posted the challan on X and asked the traffic police to revoke it. A senior traffic police officer told Deccan Herald that the bag's position apparently led the AI-based system to classify it as a person sitting behind the rider, after which the system appears to have detected a helmet violation and generated the challan. Bengaluru Traffic Police replied that the violation could be rectified and gave an email address and phone numbers, and the joint commissioner of police (traffic) told the Times of India that the violation would be revoked if the complaint was found true. Whether it was revoked is not reported.","incidentDate":"2026-09-15","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"single_interaction","reportedDate":"2026-09-26","aiSystem":"AI-enabled traffic enforcement camera on Bengaluru's Outer Ring Road, part of Bengaluru Traffic Police's AI-based violation detection system (system not named in the sources)","aiProduct":"Unidentified traffic-violation detection camera","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["legal_harm"],"harmOutcomeSummary":"A lone scooter rider received a ₹500 e-challan for a helmetless pillion passenger after a Bengaluru Traffic Police AI camera apparently classified the guitar bag on his back as a person (the rider's account via the Times of India and Deccan Herald; a senior traffic officer's explanation to Deccan Herald).","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"exact","affectedCountEvidence":"One person, the rider penalised by the challan (Times of India; Deccan Herald). The notice reached the scooter's registered owner, his wife (Zoom Bangla; BanglaScoop relaying NDTV); she is not counted separately as harmed. Exact 1.","victimAgeRange":"adult","jurisdiction":"IN","platformType":"other","outcomeType":"media_coverage","outcomeStatus":"pending","primarySourceUrl":"https://www.deccanherald.com/india/karnataka/bengaluru/ai-camera-mistakes-guitar-for-pillion-rider-in-bengaluru-issues-rs-500-helmet-fine-4160844","primarySourceLabel":"Deccan Herald, 26 September 2026: AI camera mistakes guitar for pillion rider in Bengaluru, issues Rs 500 helmet fine","firstPublishedAt":"2026-10-02T03:15:02.220118+00:00","updatedAt":"2026-10-02T03:15:02.220118+00:00","scopeVersion":"facts-v3","tags":["automated-enforcement","traffic-camera","misclassification","e-challan","public-services","bengaluru","karnataka","india","made-decision-about"]},{"id":"2026-meta-instagram-ai-assisted-account-recovery-tool-exploited-to-reset-passwords","caseFacts":{"claims":[{"id":"c1","status":"corroborated","evidence":[{"locator":"the system incorrectly sent a password reset link to that unassociated email rather than rejecting the request","relation":"supports","source_id":"s1"},{"locator":"This allowed unauthorized third parties to receive a password reset link for accounts they did not own","relation":"supports","source_id":"s1"},{"locator":"The chatbot can be seen sending a verification code to the email address provided by the hacker","relation":"supports","source_id":"s3"},{"locator":"TechCrunch was able to verify that the hacker’s public email mailbox, which was displayed in the video, effectively received the verification code.","relation":"supports","source_id":"s3"}],"assertion":"Through Meta's AI-assisted account recovery support system (High Touch Support), third parties received password reset links or verification codes for Instagram accounts they did not own, sent to an email address that was not associated with the account.","causal_attribution":"Two evidential bases: Meta's own notice to the Maine Attorney General (a party's account of its own system) and videos the attackers posted, in which TechCrunch confirmed that the mailbox shown received the verification code. TechCrunch's check covers that one delivery. It did not test which Meta tool sent the code or who owned the target account, and the videos were not opened for this review. The link between the chat assistant in the videos and High Touch Support is made by press reports and by Meta's spokesperson referring to the AI agent. No inspected document names both. Meta says the tool worked as intended and the failure lay in a separate code path (see c5), so the AI component's own contribution is disputed."},{"id":"c2","status":"reported","evidence":[{"locator":"the hacker opened a chat with Meta AI Support Assistant and asked the bot to add a new email address to the target’s account.","relation":"supports","source_id":"s3"},{"locator":"which prompts the chatbot to show a button to “Reset Password.”","relation":"supports","source_id":"s3"},{"locator":"One video shows a hacker starting a conversation with Meta’s AI support bot and asking it to link the target account with a new email address","relation":"supports","source_id":"s5"},{"locator":"using a VPN connection with an IP address that is in or near the target’s usual hometown","relation":"supports","source_id":"s6"},{"locator":"The bot followed through with the request - sending a code to the hacker's email which, when verified, was followed by an email with a link to change their password.","relation":"supports","source_id":"s7"}],"assertion":"Attackers asked Meta's AI support assistant in a chat to add or link a new email address to a target Instagram username, and some used a VPN to appear in the target's location. In one video the assistant then sent a verification code to that address and showed a button to reset the password.","causal_attribution":"Every account of the chat steps traces to videos and screenshots the attackers posted on Telegram and X. TechCrunch checked one displayed mailbox. The other videos were not independently reproduced."},{"id":"c3","status":"reported","evidence":[{"locator":"the unauthorized party was able to log in to the account if the account holder had not enabled two-factor authentication (2FA)","relation":"supports","source_id":"s1"},{"locator":"The hackers who released the video on Telegram said their exploit failed to work against any accounts that had MFA enabled.","relation":"supports","source_id":"s6"}],"assertion":"Meta's notice says the account could be logged into after the password reset if the account holder had not enabled two-factor authentication. Krebs on Security reports that the attackers who posted the video said the exploit failed against accounts with multi-factor authentication.","causal_attribution":"Meta's statement about its own system and the attackers' own statement as relayed by Krebs. Neither was tested independently."},{"id":"c4","status":"reported","evidence":[{"locator":"it can also take action for you on a growing set of requests directly within Facebook and in the future, on Instagram, including:","relation":"supports","source_id":"s12"},{"locator":"Resetting passwords","relation":"supports","source_id":"s12"},{"locator":"We’ve also started rolling out the support assistant to people who need help logging into their Facebook and Instagram accounts, starting with select cases in the US and Canada","relation":"supports","source_id":"s12"}],"assertion":"Meta announced the Meta AI support assistant for Facebook and Instagram on 19 March 2026, described it as able to take action on requests including resetting passwords directly within Facebook and, in the future, on Instagram, and said it had started rolling it out to people who need help logging into Facebook and Instagram accounts, starting with select cases in the US and Canada.","causal_attribution":"Meta's own product announcement. The announcement does not say which tool the exploited flow used. The link between this assistant and the High Touch Support tool named in Meta's notice is made by the press reports and by the notice's own description of an AI-assisted account recovery system."},{"id":"c5","status":"disputed","evidence":[{"locator":"The tool itself worked properly and functioned as intended; however due to a bug in a separate code path, the system did not properly verify that the email address provided by the individual requesting a password reset matched the email address associated with that user’s Instagram account.","relation":"supports","source_id":"s1"},{"locator":"Some of our internal backend checks failed in this instance, but it wasn’t due to the AI agent itself, and we’ve addressed the underlying cause.","relation":"supports","source_id":"s11"},{"locator":"Hackers simply told Meta’s AI chatbot that they were the owners of the target’s account, and asked the bot to link that person’s account to an email they controlled. The chatbot complied with the request","relation":"contradicts","source_id":"s4"}],"assertion":"Whether the failure lay in the AI agent or in a separate code path is disputed. Meta's notice says the tool worked as intended and that a bug in a separate code path did not check the requester's email address against the account, and a Meta spokesperson told Gizmodo that some internal backend checks failed and that this was not due to the AI agent itself. TechCrunch describes the chatbot as complying with the attackers' request.","causal_attribution":"Meta's account of its own system. TechCrunch's description of the chatbot as complying with the request is a reporter's characterisation from the attackers' videos and does not test where in Meta's system the check failed."},{"id":"c6","status":"reported","evidence":[{"locator":"Date(s) Breach Occured: 04/17/2026","relation":"supports","source_id":"s2"},{"locator":"Date Breach Discovered: 05-31-2026","relation":"supports","source_id":"s2"},{"locator":"May 31, 2026, Meta discovered that there was a vulnerability in an AI-assisted account","relation":"supports","source_id":"s1"},{"locator":"same day the exploitation was identified by Meta, the following actions were taken to","relation":"supports","source_id":"s1"},{"locator":"the AI-assisted support tool removing the vulnerable code path from production","relation":"supports","source_id":"s1"}],"assertion":"Meta's notice lists 17 April 2026 as the date the breach occurred (as 04/17/2026) and 31 May 2026 as the date it discovered the vulnerability, and says Meta disabled the AI-assisted support tool on the same day the exploitation was identified.","causal_attribution":"Meta's own dates for its own system. The notice letter gives the discovery date and no start date. The 17 April date appears only in the listing form, and the basis for it is not stated."},{"id":"c7","status":"reported","evidence":[{"locator":"Total number of persons affected (including residents): 20225","relation":"supports","source_id":"s2"},{"locator":"Total number of Maine residents affected: 30","relation":"supports","source_id":"s2"},{"locator":"reset through the support tool, did not have 2FA enabled on their account and whose Instagram accounts were likely accessed by an unauthorized party.","relation":"supports","source_id":"s1"},{"locator":"This number represents an upper bound of the users impacted as some of the accounts may have been accessed legitimately by account owners.","relation":"supports","source_id":"s1"}],"assertion":"The Maine Attorney General listing of Meta's submission gives 20225 as the total number of persons affected and 30 as the number of Maine residents. The notice defines the Maine figure as users whose passwords were reset through the tool, who had no two-factor authentication and whose accounts were likely accessed by an unauthorized party, and calls it an upper bound because some accounts may have been accessed legitimately by their owners.","causal_attribution":"Meta's own estimate. The notice's upper-bound wording is written for the Maine figure. The inspected notice does not say whether the total of 20225 counts accounts or people, how many were taken over, or how many are organisational accounts."},{"id":"c8","status":"reported","evidence":[{"locator":"“The password got changed without my knowledge and I was getting different password reset attempts throughout yesterday,” said Wong.","relation":"supports","source_id":"s3"},{"locator":"And I got repeatedly logged out from the IG iOS app[.] Quite concerning.","relation":"supports","source_id":"s10"},{"locator":"it took about five to 10 minutes to reinstate her account","relation":"supports","source_id":"s9"},{"locator":"Wong, who previously worked at Meta as a security engineer, said in a post on X her Instagram password was \"changed without my knowledge\"","relation":"supports","source_id":"s7"}],"assertion":"Jane Manchun Wong, a security researcher and former Meta employee, posted on X that her Instagram password was changed without her knowledge, that she received password reset attempts and was repeatedly logged out of the app, and told Reuters that reinstating her account took about five to ten minutes.","causal_attribution":"Her own public statements, relayed by four outlets. The X post itself was not opened. Wong does not say in the quoted statements how her account was accessed, and the outlets connect it to the exploit."},{"id":"c9","status":"reported","evidence":[{"locator":"and the account of the U.S. Space Force’s chief master sergeant","relation":"supports","source_id":"s4"},{"locator":"the account of the U.S. Space Force’s chief master sergeant","relation":"supports","source_id":"s3"},{"locator":"the Chief Master Sergeant of the U.S. Space Force were briefly defaced with pro-Iranian images and messages over the weekend","relation":"supports","source_id":"s6"},{"locator":"the Chief Master Sergeant of Space Force’s account","relation":"supports","source_id":"s5"}],"assertion":"TechCrunch and Krebs on Security report that the Instagram account of the U.S. Space Force's Chief Master Sergeant was compromised, and Krebs reports that it was briefly defaced with pro-Iranian images and messages.","causal_attribution":"Reporters' accounts based on screenshots the attackers posted. The account holder is not quoted in the inspected sources and is described here by office only. Whether the account is a personal or an official office account is not stated."},{"id":"c10","status":"reported","evidence":[{"locator":"including the Barack Obama White House account , the Chief Master Sergeant of Space Force’s account , and Sephora’s account","relation":"supports","source_id":"s5"},{"locator":"The Sephora corporate page and the account belonging to the Chief Master Sergeant of the U.S. Space Force were also hit.","relation":"supports","source_id":"s10"},{"locator":"The Instagram accounts for the Obama White House and the Chief Master Sergeant of the U.S. Space Force were briefly defaced","relation":"supports","source_id":"s6"},{"locator":"The former US president's account reportedly posted pro-Iran content before it was recovered.","relation":"supports","source_id":"s7"},{"locator":"the dormant Obama White House account (which Meta disputed)","relation":"context","source_id":"s4"}],"assertion":"Outlets named the Sephora corporate account and a dormant Obama White House account among the compromised accounts, and Krebs and the BBC report that the Obama White House account was defaced with pro-Iran content. TechCrunch's 3 June report lists the Obama White House account among apparent victims with the parenthetical '(which Meta disputed)'. Both are organisational or institutional accounts and are not counted as affected persons.","causal_attribution":"Reporters' accounts. The Guardian, Gizmodo and Reuters name Sephora on the strength of 404 Media's reporting, so Sephora rests on one chain. TechCrunch does not say what Meta disputed about the Obama White House account. The BBC reports that Meta's spokesperson called claims that world leaders' accounts were hacked totally false."},{"id":"c11","status":"reported","evidence":[{"locator":"allowing the hacker to reset the target account’s password and take control of the account — in some cases locking out the victims.","relation":"supports","source_id":"s4"},{"locator":"locking users out of their accounts and prompting a wave of complaints on platforms including X and Reddit.","relation":"supports","source_id":"s9"},{"locator":"One X user wrote that they had been unable to find \"human support\" after their Instagram account was hacked.","relation":"supports","source_id":"s7"},{"locator":"Everyday users complained of similar hijackings on Reddit and X over the weekend.","relation":"supports","source_id":"s8"}],"assertion":"Some victims were reported locked out of their accounts, and one person wrote on X that they could not find human support after their Instagram account was hacked.","causal_attribution":"Reporters' summaries of complaints on X and Reddit. The individual posts were not opened and the complainants are not identified."},{"id":"c12","status":"reported","evidence":[{"locator":"TechCrunch has seen examples of allegedly hacked handles featuring common forenames or names of countries","relation":"supports","source_id":"s4"},{"locator":"(It’s important to note that it’s hard to know for sure if all these accounts were hacked due to the same technique.)","relation":"supports","source_id":"s4"},{"locator":"hijack a number of valuable (read: short) Instagram account names that allegedly have a resale value of more than a half million dollars.","relation":"supports","source_id":"s6"},{"locator":"404 Media has seen text files of huge lists of “OG,” or high-value, original usernames","relation":"context","source_id":"s5"}],"assertion":"Short Instagram handles were reported taken in the campaign and offered for resale. TechCrunch saw examples of allegedly hacked handles being advertised for sale and notes it is hard to know whether all were taken with this technique. Krebs reports that the attackers claimed the resale value of the short handles they took exceeded half a million dollars.","causal_attribution":"The resale and value claims come from attackers' Telegram posts as relayed by TechCrunch and Krebs. No sale was confirmed and the owners are not identified."},{"id":"c13","status":"reported","evidence":[{"locator":"\"This issue has been resolved and we are securing impacted accounts,\" Meta spokesperson Andy Stone told users in a statement on X","relation":"supports","source_id":"s7"},{"locator":"On Monday, Instagram spokesperson Andy Stone said in a reply to Wong’s post and others that the issue was now fixed.","relation":"supports","source_id":"s3"},{"locator":"Invalidated all existing password reset links that had been generated through the vulnerable path","relation":"supports","source_id":"s1"},{"locator":"potentially affected accounts into a mandatory security checkpoint requiring authentication before any account access","relation":"supports","source_id":"s1"},{"locator":"impacted users to reset their passwords and re-authenticate through secure, verified channels","relation":"supports","source_id":"s1"}],"assertion":"A Meta spokesperson said on X on 1 June 2026 that the issue was resolved and Meta was securing impacted accounts. Meta's notice says that it disabled the tool, invalidated existing password reset links generated through the vulnerable path, enrolled potentially affected accounts in a mandatory security checkpoint and told impacted users to reset their passwords.","causal_attribution":"Meta's statements about its own response. TechCrunch reports that the response did not end the reports (see c14)."},{"id":"c14","status":"reported","evidence":[{"locator":"On Tuesday, however, more Instagram users claimed to have had their accounts hacked.","relation":"supports","source_id":"s4"},{"locator":"who claimed to still be able to exploit Meta’s AI chatbot, and they were advertising apparently hacked handles for sale","relation":"supports","source_id":"s4"}],"assertion":"TechCrunch reported on 3 June 2026 that more Instagram users claimed to have had accounts hacked after Meta said the issue was resolved, and that members of a Telegram channel claimed they could still exploit the chatbot.","causal_attribution":"Claims by users and Telegram members as relayed by TechCrunch. The claims were not verified, and Meta's notice says the tool was disabled on 31 May 2026."}],"effects":[{"label":"A named security researcher reported that her Instagram password was changed without her knowledge and that she was logged out, and she told Reuters the account was reinstated in about five to ten minutes","claim_id":"c8","direction":"negative"},{"label":"The Instagram account of the U.S. Space Force's Chief Master Sergeant was reported compromised and briefly defaced with pro-Iranian content","claim_id":"c9","direction":"negative"},{"label":"Some account holders were reported locked out of their Instagram accounts, and one reported being unable to reach human support","claim_id":"c11","direction":"negative"},{"label":"Short Instagram handles were reported taken and offered for resale on Telegram","claim_id":"c12","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.maine.gov/cgi-bin/agviewerad/ret?loc=4169","kind":"regulatory_filing","access":"read","language":"en","translation_note":"Notice PDF read directly. Its text layer separates words with U+200B characters and detaches the first letter of some paragraphs, so locators from this source are given with those characters read as spaces.","independence_group":"meta-own-statements"},{"id":"s2","url":"https://web.archive.org/web/20260609035813id_/https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/686120c8-63be-4e3c-b7ed-466d65b672f5.html","kind":"official_record","access":"read","language":"en","translation_note":"","independence_group":"meta-own-statements"},{"id":"s3","url":"https://techcrunch.com/2026/06/01/hackers-hijacked-instagram-accounts-by-tricking-meta-ai-support-chatbot-into-granting-access/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s4","url":"https://techcrunch.com/2026/06/03/instagram-is-alerting-users-who-were-targeted-by-hackers-during-ai-chatbot-attacks/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s5","url":"https://www.404media.co/hackers-simply-asked-meta-ai-to-give-them-access-to-high-profile-instagram-accounts-it-worked/","kind":"news_report","access":"read","language":"en","translation_note":"Read through an Internet Archive capture of 1 June 2026 (20260601172133) because the live page is paywalled. The capture carries the full article.","independence_group":"attacker-posted-videos"},{"id":"s6","url":"https://krebsonsecurity.com/2026/06/hackers-used-metas-ai-support-bot-to-seize-instagram-accounts/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s7","url":"https://www.bbc.com/news/articles/c98rzr72dpyo","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s8","url":"https://www.theguardian.com/technology/2026/jun/01/meta-ai-hack-obama-sephora-instagram","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s9","url":"https://insideretail.us/how-the-sephora-instagram-hack-exposed-metas-ai-weakness/","kind":"wire_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s10","url":"https://gizmodo.com/hackers-tricked-meta-ai-into-handing-out-access-to-major-instagram-accounts-2000766087","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"attacker-posted-videos"},{"id":"s11","url":"https://gizmodo.com/meta-says-thousands-of-instagram-accounts-were-breached-through-its-ai-support-assistant-2000768770","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"meta-own-statements"},{"id":"s12","url":"https://about.fb.com/news/2026/03/boosting-your-support-and-safety-on-metas-apps-with-ai/","kind":"official_statement","access":"read","language":"en","translation_note":"","independence_group":"meta-own-statements"}],"version":1,"ai_roles":["others_use","institutional_use"],"contexts":["privacy","everyday_life"],"unknowns":["How many people or organisations lost control of an account is not established. Meta's listing gives 20225 persons affected and the notice calls the Maine figure an upper bound, and the notice does not say how many accounts were organisational or how many were taken over.","Meta says it is unaware of what, if any, personal information was accessed. Whether any messages or data were read is unknown.","The start date rests on Meta's listing (17 April 2026), and the notice does not state its basis. 404 Media quotes a Telegram channel documenting the hack saying the exploits were 'getting abused after quietly working for months', and separately says that the same account originally posted in Telegram about the vulnerability 'at the end of March' (the year is not stated). Neither statement gives a start date for exploitation. Meta's announcement of 19 March 2026 says the support assistant was previewed 'in December' (year not stated in the passage) and that help with logging in was starting in select cases in the US and Canada, so no inspected source establishes the earliest date of exploitation.","The end date is Meta's date for disabling the tool (31 May 2026). TechCrunch reported unverified claims of continued exploitation on 3 June 2026.","The X posts, the Telegram videos and the Reddit complaints were not opened. Reporters' descriptions of them are used.","The notice does not say how many accounts were restored to their owners, and the listing shows 19 June 2026 as the date of consumer notification in a capture taken on 9 June 2026.","Figures of about 34,000 accounts targeted and a SimpliSafe account appeared only on an aggregator page that attributes the first figure to Meta without a citation and are not used."],"geography":{"basis":"Meta's notice to the Maine Attorney General counts 30 Maine users among those potentially impacted. The countries of the other affected people, the attackers (who reportedly used VPNs to appear in the target's location) and Meta's systems are not stated in the inspected sources, and the country of the named security researcher is not stated.","court_countries":[],"event_countries":[],"affected_person_countries":["US"]},"publication":{"basis":"Meta's notice to the Maine Attorney General (a PDF read directly) and the Maine listing (an archived capture) document Meta's own account of the exploited AI-assisted tool, the dates and the affected count. Nine news reports and Meta's March announcement were read in full. The mechanism claim has two independent chains (Meta's filing and attacker-posted videos checked by TechCrunch). Harm to named account holders rests on their own statements or on reporters relaying attacker-posted screenshots, so those claims stay at reported status. Only one account holder who spoke publicly is named. The office holder is described by office only.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"Meta's notice to the Maine Attorney General describes the affected system as an AI-assisted account recovery system (High Touch Support) and says it sent a password reset link to an email address not associated with the account. TechCrunch reports that no Meta employee or contractor took part in the exploit chats and checked one attacker mailbox for the code. Meta says the tool worked as intended, that the failure was a bug in a separate code path that did not verify the email address, and (to Gizmodo) that the failure was not due to the AI agent itself. Whether the AI component or the separate code path caused the failure is disputed and was not tested.","status":"supported"},"person_relations":["made_decision_about"]},"name":"Third parties exploit Meta's AI-assisted Instagram account recovery tool to reset passwords, with account takeovers reported (17 April to 31 May 2026)","summary":"Meta announced the rollout of its AI support assistant on Facebook and Instagram on 19 March 2026. Meta's filing with the Maine Attorney General (notice dated 5 June 2026) says unauthorized third parties exploited a vulnerability in its AI-assisted Instagram account recovery tool (High Touch Support) to receive password reset links for accounts they did not own, and the listing gives 17 April 2026 as the breach date and 31 May 2026 as the discovery date. Videos that attackers posted, as described by TechCrunch, 404 Media and Krebs on Security, show attackers asking the assistant in a chat to link a new email address to a target username. Reported victims include the security researcher Jane Manchun Wong, who posted that her password was changed without her knowledge, the Instagram account of the U.S. Space Force's Chief Master Sergeant, and the accounts of Sephora and a dormant Obama White House page (TechCrunch marks the last as disputed by Meta). Krebs and the BBC report pro-Iran defacement of some accounts, and TechCrunch reports that some victims were locked out and that short handles were offered for resale. The filing gives 20225 persons affected in total and 30 in Maine, and the notice calls the Maine figure an upper bound. Meta says the tool worked as intended, that a bug in a separate code path failed to check the email address, and (through a spokesperson to Gizmodo) that the failure was not due to the AI agent itself. Meta says it disabled the tool on 31 May 2026, the day it discovered the exploitation.","incidentDate":"2026-04-17","incidentEndDate":"2026-05-31","incidentKind":"bounded_series","incidentDatePrecision":"range","exposurePattern":"unknown","reportedDate":"2026-06-01","aiSystem":"Meta AI support assistant / High Touch Support (AI-assisted Instagram account recovery tool)","aiProduct":"Meta AI support assistant","aiCompany":"Meta","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm","reputational_harm"],"harmOutcomeSummary":"Reporters and Meta's notice report that third parties reset passwords on Instagram accounts and, where the account had no two-factor authentication, could log in. A named security researcher reports her password was changed without her knowledge and that reinstating the account took about five to ten minutes. Krebs on Security and the BBC report that some high-profile accounts were briefly defaced, TechCrunch reports that some victims were locked out and that short handles were offered for resale, and Meta says it does not know what personal information, if any, was accessed. Meta's filing gives 20225 persons affected in total, and its notice calls the Maine figure an upper bound.","frameworkFacets":[],"causationStatus":"disputed","participantUsersAffectedMin":0,"otherPeopleHarmedMin":2,"affectedCountStatus":"partial","affectedCountEvidence":"Two account holders are counted: the security researcher who posted that her account was taken over, and the office holder whose Instagram account TechCrunch and Krebs on Security report as compromised. TechCrunch's 3 June article says this account 'appeared to be' among the victims, no statement from the office holder or from Meta about this account was inspected, and whether it is a personal or an official account is not stated. Sephora and the Obama White House account are organisational or institutional accounts and are not counted. Other victims (everyday users, short-handle holders) are unquantified. Meta's listing of 20225 persons affected is not counted: the notice calls the Maine figure an upper bound and does not say how many accounts were taken over or how many were organisational.","victimAgeRange":"unknown","platformType":"assistant","primarySourceUrl":"https://www.maine.gov/cgi-bin/agviewerad/ret?loc=4169","primarySourceLabel":"Meta incident notification to the Maine Attorney General (5 June 2026)","firstPublishedAt":"2026-09-29T21:16:54.181323+00:00","updatedAt":"2026-09-30T01:17:45.477765+00:00","scopeVersion":"facts-v3","tags":["historical-2026"]},{"id":"2026-us-uk-hachette-cancels-shy-girl-novel-after-ai-authorship-allegations","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"The Hachette Book Group said Thursday that it has canceled the publication of horror novel","relation":"supports","source_id":"s1"},{"locator":"where it was first released in November.","relation":"supports","source_id":"s1"},{"locator":"The US release of a horror novel has been cancelled by its publisher over concerns that AI was used to help write it.","relation":"supports","source_id":"s2"},{"locator":"Wildfire (in the UK) have decided to no longer continue publishing their edition","relation":"supports","source_id":"s2"},{"locator":"The title has also been removed from online retailers including Amazon","relation":"supports","source_id":"s3"},{"locator":"But it took until last Thursday for Hachette to pull the book from its website","relation":"supports","source_id":"s8"},{"locator":"March 19 , the New York Times landed a big story about allegations that a hyped horror novel called Shy Girl","relation":"supports","source_id":"s7"}],"assertion":"Hachette Book Group said on Thursday 19 March 2026 that it had cancelled the US publication of the horror novel Shy Girl by Mia Ballard (Orbit imprint) and would not continue the UK edition (Wildfire imprint, first released in November 2025). The Guardian reports the title was also removed from online retailers including Amazon.","causal_attribution":"The cancellation is Hachette’s own announcement, relayed by several outlets. Sources link it to allegations of AI use and to a review by the publisher. Whether AI was in fact used is unresolved (claim c7)."},{"id":"c2","status":"reported","evidence":[{"locator":"readers on platforms such as Goodreads and Reddit had questioned whether sections of the text bore hallmarks of AI-generated prose.","relation":"supports","source_id":"s3"},{"locator":"A widely shared Reddit thread drew hundreds of comments","relation":"supports","source_id":"s3"},{"locator":"amassed more than 1.2m views","relation":"supports","source_id":"s3"},{"locator":"one reviewer on the GoodReads website claimed the book appeared to be \"written by ChatGPT\"","relation":"supports","source_id":"s2"},{"locator":"In January, a Reddit post from a user who claimed to be a book editor generated significant discussion around","relation":"supports","source_id":"s5"},{"locator":"published online on January 19 by","relation":"supports","source_id":"s7"}],"assertion":"Readers alleged online that the novel’s text read as AI-generated: reviews on Goodreads, a widely shared Reddit thread, a January Reddit post by a user who said they were a book editor, and a YouTube video posted in January 2026 that had more than 1.2 million views.","causal_attribution":"Online opinion and analysis by readers. It is not evidence about who produced the text. Sources differ on when the earliest accusations appeared (see unknowns)."},{"id":"c3","status":"reported","evidence":[{"locator":"78.4 percent of the document is AI Generated","relation":"supports","source_id":"s7"},{"locator":"I soon confirmed this with two other services.","relation":"supports","source_id":"s7"},{"locator":"Originality and GPTZero","relation":"supports","source_id":"s7"},{"locator":"found evidence that 78 percent of the book is AI-generated","relation":"supports","source_id":"s5"},{"locator":"that large parts of Shy Girl appeared to show patterns characteristic of A.I.-generated writing.","relation":"supports","source_id":"s6"},{"locator":"to use these reports only for guidance, not as proof of guilt","relation":"context","source_id":"s7"},{"locator":"A.I. detection software, while improving, has been shown to be fallible at best","relation":"context","source_id":"s6"}],"assertion":"AI-detection results were reported as part of the case. A publishing consultant’s first-person account says a copy of the UK edition scored 78.4 percent AI-generated on the Pangram detector, that two other detection services gave confirming results, and that the consultant brought the findings to the New York Times. Futurism reports that the CEO of Pangram ran a test and found evidence that 78 percent of the book is AI-generated. Slate reports that the New York Times verified claims that large parts of the book appeared to show patterns characteristic of AI-generated writing.","causal_attribution":"Detector scores describe statistical patterns in a text. They do not establish who produced the text or whether a generative model was used. Detector reliability is contested in the sources, and the New York Times article that carried the verification was not read."},{"id":"c4","status":"reported","evidence":[{"locator":"following an investigation into the origins of the book.","relation":"supports","source_id":"s1"},{"locator":"the publisher confirmed it had halted publication after an internal review.","relation":"supports","source_id":"s3"},{"locator":"Although the publisher claimed the decision came after a thorough review of the text","relation":"supports","source_id":"s4"},{"locator":"lengthy investigation in recent weeks","relation":"supports","source_id":"s5"},{"locator":"remains committed to protecting original creative expression and storytelling","relation":"supports","source_id":"s2"}],"assertion":"Hachette said its decision followed a review or investigation of the book and cited its commitment to protecting original creative expression and storytelling. The Wall Street Journal report says the cancellation followed an investigation into the origins of the book, and Futurism relays a Hachette statement to the Journal that both its US and UK imprints conducted a lengthy investigation in recent weeks.","causal_attribution":"Publisher statements about its own process. The sources inspected do not report what the review or investigation found about AI use."},{"id":"c5","status":"reported","evidence":[{"locator":"concerns the day before the announcement.","relation":"supports","source_id":"s4"},{"locator":"shortly after the New York Times approached the publisher with evidence of AI use.","relation":"supports","source_id":"s8"},{"locator":"one Times article said that Hachette pulled the book within a day of first notification by the Times","relation":"supports","source_id":"s7"}],"assertion":"The New York Times asked Hachette about the AI concerns the day before the announcement, and the cancellation followed shortly after the Times approached the publisher with evidence of AI use. A consultant’s first-person account says a Times article reported that Hachette pulled the book within a day of first notification by the Times.","causal_attribution":"Timing reported by outlets that rely on the New York Times report, which was not read directly. The sequence shows what preceded the announcement and does not show what Hachette concluded."},{"id":"c6","status":"reported","evidence":[{"locator":"has denied using AI to write the book","relation":"supports","source_id":"s2"},{"locator":"hired to edit the original self-published version of the novel had used AI.","relation":"supports","source_id":"s2"},{"locator":"my mental health is at an all time low and my name is ruined for something I didn","relation":"supports","source_id":"s2"},{"locator":"Ballard has denied personally using AI to write the novel.","relation":"supports","source_id":"s3"},{"locator":"my mental health is at an all time low and my name is ruined for something I didn","relation":"supports","source_id":"s4"},{"locator":"pursuing legal action","relation":"supports","source_id":"s8"},{"locator":"did not personally use AI","relation":"supports","source_id":"s9"},{"locator":"please do your research on editors before trusting them with your work","relation":"supports","source_id":"s9"}],"assertion":"Ballard denied personally using AI to write the novel in an email to the New York Times and, per The Independent, in an email to the Wall Street Journal, and told the New York Times that an acquaintance hired to edit the original self-published version had used AI. Ballard wrote: \"This controversy has changed my life in many ways and my mental health is at an all time low and my name is ruined for something I didn’t even personally do\", and said legal action was being pursued.","causal_attribution":"The author’s own statements about the author’s own conduct and its effects. Ballard spoke publicly under that name in emails to the New York Times and the Wall Street Journal quoted by several outlets. The acquaintance is not named in the sources and no response from that person is reported."},{"id":"c7","status":"disputed","evidence":[{"locator":"found evidence that 78 percent of the book is AI-generated","relation":"supports","source_id":"s5"},{"locator":"78.4 percent of the document is AI Generated","relation":"supports","source_id":"s7"},{"locator":"has denied using AI to write the book","relation":"contradicts","source_id":"s2"},{"locator":"A.I. detection software, while improving, has been shown to be fallible at best","relation":"context","source_id":"s6"}],"assertion":"Whether, by whom and to what extent generative AI produced the text of the published novel is disputed. Detector results and reader analyses point to substantial AI-generated prose. Ballard denies personal use and attributes any AI use to a hired editor. No source inspected reports the editor’s account, an independent verification of authorship, or a finding by the publisher.","causal_attribution":"Causal attribution of the consequence to AI use rests on allegations and detector output that the author disputes. The consequence (cancellation) is a publisher decision responding to those allegations."}],"effects":[{"label":"Publisher cancelled the US edition and discontinued the UK edition of the author’s novel after allegations that it was AI-generated","claim_id":"c1","direction":"negative"},{"label":"Author reports damage to name and severely worsened mental health after the controversy","claim_id":"c6","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.wsj.com/business/media/publisher-pulls-shy-girl-horror-novel-after-ai-allegations-c7944702","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"wsj-shy-girl-report"},{"id":"s2","url":"https://www.bbc.com/news/articles/c5y9d44jj24o","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"nyt-shy-girl-report"},{"id":"s3","url":"https://www.theguardian.com/books/2026/mar/20/hachette-horror-novel-shy-girl-suspected-ai-use-mia-ballard","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"nyt-shy-girl-report"},{"id":"s4","url":"https://techcrunch.com/2026/03/21/publisher-pulls-horror-novel-shy-girl-over-ai-concerns","kind":"trade_press","access":"read","language":"en","translation_note":"","independence_group":"nyt-shy-girl-report"},{"id":"s5","url":"https://futurism.com/artificial-intelligence/novel-pulled-author-accused-ai","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"nyt-shy-girl-report"},{"id":"s6","url":"https://slate.com/culture/2026/03/shy-girl-mia-ballard-novel-a-i-book-horror-reddit-hachette-canceled.html","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"slate-shy-girl-reporting"},{"id":"s7","url":"https://thewalrus.ca/new-york-times-ai-generated-shy-girl-mia-ballard/","kind":"first_person_account","access":"read","language":"en","translation_note":"","independence_group":"consultant-first-person-account"},{"id":"s8","url":"https://www.publishersweekly.com/pw/by-topic/industry-news/publisher-news/article/100037-while-ai-discourse-rages-publishing-has-more-questions-than-answers.html","kind":"trade_press","access":"read","language":"en","translation_note":"","independence_group":"nyt-shy-girl-report"},{"id":"s9","url":"https://www.aol.com/articles/horror-novel-reportedly-pulled-publication-133355085.html","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"wsj-shy-girl-report"}],"version":1,"ai_roles":["others_use"],"contexts":["work"],"unknowns":["Whether generative AI produced any of the text, who used it and to what extent is unresolved. The author denies personal use and attributes any AI use to a hired editor. No source inspected reports that editor’s account, an independent authorship check, or what Hachette found.","The Wall Street Journal page was read as a truncated Wayback extract (three paragraphs, paywall). The New York Times article that first reported the story could not be read (HTTP 403 live and in Wayback captures). Statements attributed to the Times are read through BBC, The Guardian, TechCrunch, Futurism and Publishers Weekly.","Sources differ on when the first online accusations appeared. The Guardian says questions began in early 2026, and Futurism dates a Reddit post to January. Futurism also says accusations have swirled around the book since its self-published run last year, Slate says the rumblings began in January and even earlier, and a first-person account by a publishing consultant says the first accusations appeared online five or six months before Hachette’s July 2025 acquisition announcement and that a Reddit thread was a year old in early February 2026. No inspected source reports a consequence for the author from those earlier accusations. This record dates the event to the publisher’s decision on 19 March 2026, the first reported consequence for the author.","Detector reliability and the tested copy are contested. A Wall Street Journal opinion column on the reliability of the Pangram report was not read, and a summary of it on Wikipedia is not cited.","The author says legal action is being pursued. The target and any filing are not established by the sources inspected. A newsletter’s report of a $1 million lawsuit against Hachette had no filing or second source and is not relied on.","The US publication date is reported differently (April in BBC and Slate, 19 May in the Wall Street Journal). UK sales are reported as about 1,800 (Guardian, citing NielsenIQ) and almost 2,000 (BBC) copies. Neither is used as a harm count.","Whether existing UK copies were withdrawn or destroyed is not consistently reported. The Guardian says the title was removed from online retailers and would no longer be distributed in the UK.","The accusers on Reddit and YouTube, the consultant and the hired editor are not described individually beyond their role in the reporting."],"geography":{"basis":"Hachette cancelled the US release and discontinued the UK edition (BBC). The BBC describes the author as a US author, and The Independent, citing a Google Books author profile, reports a US residence. No court is involved in the sources inspected.","court_countries":[],"event_countries":["US","GB"],"affected_person_countries":["US"]},"publication":{"basis":"The publisher’s cancellation, its stated review, the online allegations, the AI-detector results and the author’s denial were read from the Wall Street Journal (truncated), BBC, The Guardian, TechCrunch, Futurism, Slate, Publishers Weekly, The Independent (via AOL) and a consultant’s first-person account. The author is named because the author spoke publicly under that name in emails to two newspapers. Every AI-related claim is attributed and AI involvement is recorded as disputed. The event is dated to the publisher’s decision on 19 March 2026, the first reported consequence for the author. Earlier reader accusations are recorded as context.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"AI-text detectors (Pangram, and per one first-person account Originality and GPTZero) scored the UK edition as largely AI-generated, and readers alleged the prose showed hallmarks of AI. The author denies personally using AI and says an acquaintance hired to edit the self-published version used it. Hachette cited a review of the text and its stance on original creative expression and did not state, in the sources inspected, what the review found. Detector reliability is contested.","status":"disputed"},"person_relations":["made_claim_about"]},"name":"US and UK: Hachette cancels the US edition of the novel Shy Girl and discontinues the UK edition after allegations it was AI-generated, with the author denying personal use of AI","summary":"On 19 March 2026 Hachette Book Group said it had cancelled the US publication of the horror novel Shy Girl by Mia Ballard (Orbit imprint) and would not continue the UK edition (Wildfire imprint, first released in November 2025). Reports say the decision followed an investigation by Hachette and came a day after the New York Times asked the publisher about online allegations that the text was largely AI-generated. The allegations came from readers on Goodreads, Reddit and YouTube and from AI-detector results, including a 78.4 percent AI-generated score on the Pangram detector that a publishing consultant says two other services confirmed. Ballard denied personally using AI in emails to the New York Times and the Wall Street Journal, and told the New York Times that an acquaintance hired to edit the original self-published version used AI. Ballard wrote that \"my name is ruined\" and \"my mental health is at an all time low\", and said legal action was being pursued. Hachette’s public statements cite its commitment to original creative expression. The sources inspected do not report what its investigation found. Whether AI generated any of the text, and who used it, is unresolved.","incidentDate":"2026-03-19","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"unknown","reportedDate":"2026-03-19","aiSystem":"Alleged generative-AI text production in the novel (the author denies personal use and attributes any AI use to a hired editor), and AI-text detectors (Pangram, and per one account Originality and GPTZero) whose scores were used to allege AI authorship","aiProduct":"Pangram AI-text detector","severity":"medium","verificationStatus":"disputed","harmCategories":[],"harmOutcomes":["professional_harm","reputational_harm","psychological_distress"],"harmOutcomeSummary":"Hachette cancelled the US publication and discontinued the UK edition of the author’s novel. The author wrote to the New York Times that \"my mental health is at an all time low and my name is ruined for something I didn’t even personally do\" (relayed by BBC and The Guardian). The author denies personally using AI.","frameworkFacets":[],"causationStatus":"disputed","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"exact","affectedCountEvidence":"One person, the author, reports harm (cancelled publication, damage to name and severely worsened mental health). The hired editor, readers who bought the book and the publisher are not counted as harmed persons.","victimAgeRange":"adult","platformType":"other","primarySourceUrl":"https://www.theguardian.com/books/2026/mar/20/hachette-horror-novel-shy-girl-suspected-ai-use-mia-ballard","primarySourceLabel":"The Guardian (20 Mar 2026)","firstPublishedAt":"2026-09-29T21:16:09.707267+00:00","updatedAt":"2026-09-30T01:17:57.941496+00:00","scopeVersion":"facts-v3","tags":["historical-2026"]}]}