{"meta":{"exportedAt":"2026-10-12T09:12:24.117Z","formatVersion":2,"selection":{"q":"employee","system":"","harm":"","context":"","country":"","role":"","relation":"","evidence":"","year":"","response":"regulatory","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":2,"coverage":{"cases":2,"countries":2,"languages":1,"unknownLocation":0,"locationPending":0,"unknownLanguage":0,"unknownDate":0,"lawsuits":0,"regulatory":2,"minors":0,"coreRelations":1,"contextualRelations":0,"mixedRelations":0,"unknownRelations":1,"relationPending":0,"relationUnknown":1},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2024-florida-judicial-candidate-shared-likely-ai-fake-call-of-justices-suspended","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'She referenced a former court employee’s book — which she hadn’t read — and sent the paper a link to the author’s website with a deepfake recording of a conversation between Florida Supreme Court justices and the Ninth Judicial Circuit chief judge.'","relation":"supports","source_id":"s1"},{"locator":"'referenced the book when trying to obtain an endorsement from the South Florida Sun Sentinel during her 2024 judicial election campaign, according to a May 9 notice of ethics charges' and 'She supplied the fake recording, purportedly of a conversation involving two Florida Supreme Court justices, when the newspaper’s editorial board questioned the book’s claims.'","relation":"supports","source_id":"s2"}],"assertion":"During her 2024 judicial campaign, while seeking the South Florida Sun Sentinel editorial board's endorsement, the candidate supplied a recording purportedly of a conversation between Florida Supreme Court justices and the Ninth Judicial Circuit's chief judge when the board questioned her claims.","causal_attribution":"Bloomberg Law's account of the case and the ABA Journal's report of the commission's notice both derive from the record of the same disciplinary proceeding, so the claim is recorded as reported."},{"id":"c2","status":"reported","evidence":[{"locator":"'“The recording is fabricated, likely using computer manipulation or generative-AI,” the notice of charges says. “While the voices resemble those of the purported participants, the manner of speech, tone, and much of the content are objectively unrealistic.”'","relation":"supports","source_id":"s2"},{"locator":"'“The recording is fabricated, likely using computer manipulation or generative-AI. While the voices resemble those of the purported participants, the manner of speech, tone, and much of the content are objectively unrealistic,” the notice said.'","relation":"supports","source_id":"s3"}],"assertion":"The Judicial Qualifications Commission's notice of charges said the recording was fabricated, likely using computer manipulation or generative AI, and that while the voices resemble those of the purported participants, the manner of speech, tone and much of the content are objectively unrealistic.","causal_attribution":"Both outlets quote the same notice, so this is one origin. The commission states AI generation as likely, alongside computer manipulation; no forensic analysis or creator is reported."},{"id":"c3","status":"reported","evidence":[{"locator":"'she provided a link to a “fabricated phone call” between two justices — Chief Justice Carlos Muniz and Justice Renatha Francis — and the 9th Circuit’s chief judge, Lisa Munyon, Friday’s notice said' and 'your actions eroded public confidence by perpetuating a false perception of illegal, unethical, or immoral conduct by justices of the Florida Supreme Court, a chief judge, and others working within the judicial branch,” the notice said.'","relation":"supports","source_id":"s3"}],"assertion":"The notice named Chief Justice Carlos Muñiz, Justice Renatha Francis and Chief Judge Lisa Munyon as the purported participants and said the candidate's actions perpetuated a false perception of illegal, unethical or immoral conduct by justices of the Florida Supreme Court, a chief judge and others in the judicial branch.","causal_attribution":"The notice's own characterisation of the harm to the depicted judges, reported by one outlet."},{"id":"c4","status":"reported","evidence":[{"locator":"'Peffer admitted to listening to a portion of the recording and sharing it publicly “despite clear evidence of its inauthenticity,” according to the notice.'","relation":"supports","source_id":"s3"},{"locator":"'testifies during her ethics violation hearing at the Broward County Courthouse in Fort Lauderdale on Dec. 16, 2025' and '\"I cannot justify or explain why now listening to it I thought it was a valid piece of content at the time, but I did,\" she said.'","relation":"supports","source_id":"s4"},{"locator":"'Peffer gave this statement to Law.com:' and 'my reference to content created by a third party—to whom I have absolutely no ties—was a violation of the Judicial Canons' and 'I take responsibility for my actions and apologize for the unfortunate effects the reference may have caused my fellow judiciary members.'","relation":"supports","source_id":"s2"}],"assertion":"According to the notice, the candidate listened to only a portion of the recording and shared it publicly despite clear evidence of its inauthenticity. In a statement reported in May 2025 she apologised and said the content was created by a third party with whom she had no ties, and at the December 2025 hearing she testified that she could not explain why she had thought it was valid content.","causal_attribution":"The notice's findings and the candidate's own statements; each part rests on a single report of its origin."},{"id":"c5","status":"reported","evidence":[{"locator":"'A Florida trial judge has been suspended for 30 days and fined $10,000' and 'her conduct undermined public confidence in the integrity of the judiciary by promoting false accusations against the judiciary of the Ninth Judicial Circuit and by implicating sitting Florida Supreme Court justices,” the opinion said.' and 'Justices Carlos G. Muñiz and Renatha S. Francis, who had their voices spoofed in the call, recused from the decision.'","relation":"supports","source_id":"s1"}],"assertion":"The Florida Supreme Court, in an unauthored opinion issued on 9 October 2026, suspended the judge for 30 days and fined her $10,000, saying her conduct undermined public confidence in the judiciary by implicating sitting Florida Supreme Court justices; Justices Muñiz and Francis, whose voices were spoofed in the call, recused.","causal_attribution":"Reported by Bloomberg Law from the opinion, which was not inspected; the sanction concerns the candidate's own conduct in sharing the recording."},{"id":"c6","status":"reported","evidence":[{"locator":"'Florida's courts watchdog agency has recommended a 30-day suspension, a public reprimand and a $10,000 fine' and 'perpetuated a false and undignified perception of the judiciary that ensnared not only those justices and judges who were specifically named in the Book and the Recording'","relation":"supports","source_id":"s4"}],"assertion":"The commission's hearing panel recommended a 30-day suspension, a public reprimand and a $10,000 fine, writing that the judge had perpetuated a false and undignified perception of the judiciary that ensnared the justices and judges named in the book and the recording.","causal_attribution":"The hearing panel's filing as reported in one outlet."},{"id":"c7","status":"reported","evidence":[{"locator":"'Francis, Muñiz, and Munyon all said the recording was fake.' and 'The Sentinel reported last year that it and several other alleged fakes were referred to the Orange County Sheriff’s Office for a criminal investigation.'","relation":"supports","source_id":"s5"}],"assertion":"Florida Politics reported that Chief Justice Muñiz, Justice Francis and Chief Judge Munyon all said the recording was fake, and that the Sun Sentinel had reported the previous year that it and several other alleged fakes were referred to the Orange County Sheriff's Office for a criminal investigation.","causal_attribution":"The depicted judges' statements as reported by one outlet; who made the criminal referral and its outcome are not reported."},{"id":"c8","status":"documented","evidence":[{"locator":"'Disposition (SC) - Suspended/Public Reprimand (JQC - Before FSC)' and '2026-10-09T14:35:48.780Z' and 'the Court hereby approves the hearing panel's findings of fact, conclusions of law, and recommendations to this Court.' and 'Respondent, Lauren Nichole Peffer, is hereby fined $10,000.00 and is suspended for 30 days from her duties as a judge of the Seventeenth Judicial Circuit.' and 'We order Respondent to pay the costs of these proceedings' and 'Respondent shall also receive a public reprimand, which will be accomplished by publication of this order.'","relation":"supports","source_id":"s6"}],"assertion":"On 9 October 2026 the Florida Supreme Court approved the hearing panel's findings of fact, conclusions of law and recommendations, fined the judge $10,000, suspended her for 30 days, ordered her to pay the costs of the proceedings and imposed a public reprimand to be accomplished by publication of the order.","causal_attribution":"Established by the court's docket entry for the disposition; the sanction concerns the judge's own conduct in sharing the recording."}],"effects":[{"label":"a fabricated recording imitating the voices of two Supreme Court justices and a chief judge was presented to a newspaper editorial board in a judicial campaign","claim_id":"c1","direction":"negative"},{"label":"the judicial watchdog said it perpetuated a false perception of misconduct by the judges it depicted","claim_id":"c3","direction":"negative"},{"label":"the candidate who shared it was later suspended for 30 days and fined","claim_id":"c5","direction":"negative"}],"sources":[{"id":"s1","url":"https://news.bloomberglaw.com/litigation/florida-judge-suspended-over-deepfake-call-mimicking-justices","kind":"news_report","access":"read","language":"en","translation_note":"Read in English by the research agent (an AI) on 2026-10-12 on news.bloomberglaw.com (HTTP 200). The page shows the article text through the case citation and then a login prompt; any later text was not inspected. No translation was needed and no human reviewer inspected the text.","independence_group":"bloomberg-law-peffer"},{"id":"s2","url":"https://www.abajournal.com/news/article/florida-judge-is-accused-of-sharing-objectively-unrealistic-fake-recording-with-editorial-board","kind":"news_report","access":"read","language":"en","translation_note":"Read in English by the research agent (an AI) on 2026-10-12 on abajournal.com (HTTP 200). No translation was needed and no human reviewer inspected the text.","independence_group":"aba-journal-peffer"},{"id":"s3","url":"https://flaglerlive.com/lauren-peffer-fake/","kind":"news_report","access":"read","language":"en","translation_note":"Read in English by the research agent (an AI) on 2026-10-12 on flaglerlive.com, which carries the News Service of Florida report (HTTP 200). No translation was needed and no human reviewer inspected the text.","independence_group":"news-service-of-florida-peffer"},{"id":"s4","url":"https://www.yahoo.com/news/politics/articles/florida-judge-cited-deepfake-call-180000031.html","kind":"news_report","access":"read","language":"en","translation_note":"Read in English by the research agent (an AI) on 2026-10-12 on the Yahoo News syndicated copy (provider Tampa Bay Times), HTTP 200. Yahoo and the Tampa Bay Times canonical URL date the copy 10 October 2026, while its text describes the hearing panel recommendation filed \"Friday\" (the Florida Supreme Court docket lists the findings and recommendations on 27 February 2026), so the text appears to republish earlier reporting. No translation was needed and no human reviewer inspected the text.","independence_group":"tampa-bay-times-peffer"},{"id":"s5","url":"https://floridapolitics.com/archives/737787-broward-judge-faces-charges-for-sharing-deepfake-recording-unread-e-book-during-campaign/","kind":"news_report","access":"read","language":"en","translation_note":"Read in English by the verification agent (an AI) on 2026-10-12 from an Internet Archive capture of 12 May 2025 (the live page returned HTTP 403). It reports the commission's notice of charges and earlier Sun Sentinel reporting. No translation was needed and no human reviewer inspected the text.","independence_group":"florida-politics-peffer"},{"id":"s6","url":"https://acis.flcourts.gov/portal/court/68f021c4-6a44-4735-9a76-5360b2e8af13/case/ac1415dc-cff8-4197-9e1f-db5cd39262a3","kind":"court_docket","access":"read","language":"en","translation_note":"Docket entry texts read in English by the verification agent (an AI) on 2026-10-12 through the public data interface behind this docket page. The documents attached to the entries (the notices of charges, the hearing panel findings and the disposition order) sit behind an automated challenge and were not opened. No human reviewer inspected the text.","independence_group":"florida-supreme-court-docket-sc2025-0647"}],"version":1,"ai_roles":["others_use"],"contexts":["justice","elections","public_life"],"unknowns":["Who created the recording and with what tool or method; the commission says computer manipulation or generative AI.","The date in 2024 when the recording was supplied to the editorial board; Florida Politics says the Sun Sentinel reported on the recording in July 2024.","Whether the hearing panel's findings, which the Florida Supreme Court approved, or the court's order attribute the recording to AI; neither document was opened.","How widely the recording circulated, who referred it for criminal investigation and with what result, and whether the depicted judges reported any consequence beyond saying it was fake."],"geography":{"basis":"The recording was supplied to the South Florida Sun Sentinel editorial board during a campaign for a Broward County court seat in Florida, and the depicted judges sit on the Florida Supreme Court and Florida's Ninth Judicial Circuit, per all inspected reports. The disciplinary proceeding was decided by the Florida Supreme Court.","court_countries":["US"],"event_countries":["US"],"affected_person_countries":["US"]},"publication":{"basis":"News reports of the disciplinary proceeding (Bloomberg Law on the Supreme Court decision; the ABA Journal, the News Service of Florida and Florida Politics on the commission's notice of charges) describe a recording imitating the voices of two justices and a chief judge, presented to an editorial board in a judicial campaign. The commission, which examined the recording, said it was fabricated, likely using computer manipulation or generative AI, and said it created a false perception of misconduct by the depicted judges. AI involvement is recorded as suspected.","reviewed_on":"2026-10-12"},"ai_involvement":{"basis":"The Florida Judicial Qualifications Commission, which examined the recording in bringing charges, stated in its notice that the recording \"is fabricated, likely using computer manipulation or generative-AI\", and that the voices resemble those of the purported participants while the manner of speech, tone and content are objectively unrealistic. Bloomberg Law reports that the two justices \"had their voices spoofed in the call\". The recording's imitation of the judges' voices is what presented them as discussing the book and is the basis of the commission's finding of a false perception of misconduct. The commission's attribution is hedged between computer manipulation and generative AI, its technical basis beyond listening to the recording is not disclosed, and no creator or tool is identified.","status":"suspected"},"person_relations":["depicted_or_impersonated"]},"name":"Florida: judge suspended for sharing, as a 2024 candidate, a fabricated call of justices the judicial watchdog says was likely computer-manipulated or AI-made","summary":"While campaigning in 2024 for a Broward County court seat, Lauren Peffer, now a county judge, sought the endorsement of the South Florida Sun Sentinel editorial board. Asked to back her claim of an image crisis in Florida's judiciary, she cited a self-published book by a fired employee of the Ninth Judicial Circuit and supplied a recording purportedly of a phone call about the book between Chief Justice Carlos Muñiz, Justice Renatha Francis and the circuit's chief judge, Lisa Munyon. The Florida Judicial Qualifications Commission's notice of formal charges, filed in May 2025, said the recording was fabricated, likely using computer manipulation or generative AI, and that while the voices resembled those of the participants, the manner of speech, tone and much of the content were objectively unrealistic. The notice said she had shared it despite clear evidence of its inauthenticity and had perpetuated a false perception of illegal, unethical or immoral conduct by the justices, a chief judge and others in the judicial branch. Peffer apologised, said the content was created by a third party with whom she had no ties, and testified that she could not explain why she had thought it valid. According to Bloomberg Law, the Florida Supreme Court on 9 October 2026 suspended her for 30 days and fined her $10,000, saying her conduct undermined public confidence in the judiciary by implicating sitting justices; the two justices whose voices were faked recused. Who made the recording, and with what tool, is not reported.","incidentDate":"2024-01-01","incidentKind":"single_event","incidentDatePrecision":"year","exposurePattern":"single_interaction","reportedDate":"2025-05-11","aiSystem":"An audio recording, posted on a website associated with a former court employee, that faked the voices of two Florida Supreme Court justices and a circuit chief judge. The Judicial Qualifications Commission's notice of charges said it was fabricated, likely using computer manipulation or generative AI. No tool or creator is identified in the inspected reports.","aiProduct":"Unidentified voice-cloning tool (suspected)","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["reputational_harm"],"harmOutcomeSummary":"According to the Judicial Qualifications Commission's notice of charges and the Florida Supreme Court opinion as reported, a fabricated recording that imitated the voices of two Supreme Court justices and a circuit chief judge was presented to a newspaper editorial board during a judicial campaign, and the notice said it perpetuated a false perception of illegal, unethical or immoral conduct by those judges. The candidate who shared it was later suspended and fined. All three judges said the recording was fake, according to Florida Politics; no further consequence for them is reported.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":3,"affectedCountStatus":"exact","affectedCountEvidence":"Three people: the two Florida Supreme Court justices and the circuit chief judge whom the recording purported to capture, named in the FlaglerLive report of the notice of charges; Florida Politics reports that all three said the recording was fake. The candidate who shared the recording is not counted as harmed by it; newspaper staff and the public are not counted.","victimAgeRange":"adult","jurisdiction":"US-FL","platformType":"other","outcomeType":"regulatory_action","outcomeStatus":"resolved","primarySourceUrl":"https://news.bloomberglaw.com/litigation/florida-judge-suspended-over-deepfake-call-mimicking-justices","primarySourceLabel":"Bloomberg Law, 9 October 2026: FL Judge Suspended Over Deepfake Call Mimicking Justices","firstPublishedAt":"2026-10-12T03:18:31.150274+00:00","updatedAt":"2026-10-12T03:18:31.150274+00:00","scopeVersion":"facts-v3","tags":["deepfake","voice-impersonation","judiciary","election","florida","public-figure","judicial-discipline"]},{"id":"2026-singapore-bee-cheng-hiang-ai-generated-email-script-exposed-members-addresses","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'personal data breach involving 95,364 of the company'; 'As the marketing email was sent in batches of 1,000, each affected member'; 'email address was disclosed to up to 999 other recipients within the same batch, displayed in the \"To\" field of the emails.'","relation":"supports","source_id":"s2"},{"locator":"'More than 95,000 Bee Cheng Hiang customers had their e-mail addresses accidentally exposed in April'; 'These customer e-mail addresses were the only personal data affected'; 'The problematic marketing e-mails were sent out on April 25, and the PDPC was notified of the data breach on April 27.'","relation":"supports","source_id":"s1"}],"assertion":"On 25 April 2026 Bee Cheng Hiang's marketing email was sent in batches of 1,000 with all recipients' addresses in the To field, disclosing each affected member's email address to up to 999 other recipients; Mothership puts the number of affected members at 95,364 (The Straits Times: more than 95,000), and the PDPC says email addresses were the only personal data involved.","causal_attribution":"PDPC findings as relayed by The Straits Times and Mothership."},{"id":"c2","status":"reported","evidence":[{"locator":"'the issue was with the prompt the employee gave the generative AI tool to write a program to send a'; 'without specific instructions to hide the e-mail address of each recipient from other customers.'; 'The PDPC clarified that the incident was not due to a malfunction in the artificial intelligence tool used by the Bee Cheng Hiang employee.'; 'The incident was caused by a human error in developing the e-mail distribution code with an AI tool,'; 'the difference between the correct code and the bad one was the placement of a couple of brackets'","relation":"supports","source_id":"s1"},{"locator":"'The incident was caused by a human error when the employee developed an email distribution Python script with an AI tool.'; 'It was missing a bracket that caused all recipient email addresses within each batch to be grouped together as a single object in the'","relation":"supports","source_id":"s2"}],"assertion":"According to the PDPC, a marketing employee wrote the email distribution script with a generative AI tool, and the prompt did not ask for recipients' addresses to be hidden from one another. Mothership reports that a missing bracket in the generated script grouped all addresses in each batch into one To field, and The Straits Times says the difference between the correct and faulty code was the placement of a couple of brackets. The PDPC says the AI tool did not malfunction and describes the cause as human error in developing the code with an AI tool.","causal_attribution":"The PDPC attributes the disclosure to the AI-generated script and the employee's prompt, and states that the AI tool did not malfunction."},{"id":"c3","status":"reported","evidence":[{"locator":"'It added that the company had relied on a single employee'; 'without a review process for supervisory checks of the employee'; 'testing was done by checking activity logs without reviewing the content of the actual test e-mail.'; 'did not have a governance framework or policies in place to guide employees on the use of generative AI tools for work'; 'It was also the first time the home-grown traditional food products company known for its bak kwa was using an AI tool for its business operations.'","relation":"supports","source_id":"s1"},{"locator":"'did not conduct sufficiently robust testing to check the email distribution script before it was deployed'","relation":"supports","source_id":"s2"}],"assertion":"The PDPC found that the employee tested the script only by checking activity logs, that the company did not test the script sufficiently, relied on a single employee without supervisory review, and had no governance framework or policies on staff use of generative AI; it was the company's first use of an AI tool in its business operations.","causal_attribution":"PDPC findings as relayed by The Straits Times and Mothership."},{"id":"c4","status":"reported","evidence":[{"locator":"'There was also no evidence that the e-mail addresses were further misused.'; 'it stopped the mass distribution of the e-mails, rectified the bad code and notified all affected customers'; 'the commission accepted a voluntary undertaking by Bee Cheng Hiang on Sept 2 to improve its compliance with the Personal Data Protection Act.'","relation":"supports","source_id":"s1"},{"locator":"'implemented double-verification checks by at least two staff for all bulk email communications before sending out.'","relation":"supports","source_id":"s2"}],"assertion":"The PDPC reports no evidence that the email addresses were further misused. The company stopped the distribution, corrected the script, notified all affected members and now requires at least two staff to check bulk emails; the PDPC accepted a voluntary undertaking from the company on 2 September 2026.","causal_attribution":"PDPC account of the company's remedial actions and the undertaking."},{"id":"c5","status":"reported","evidence":[{"locator":"'It was the first AI-related data breach reported to the Personal Data Protection Commission (PDPC), the commission told The Straits Times on Sept 30.'","relation":"supports","source_id":"s1"}],"assertion":"The PDPC told The Straits Times that this was the first AI-related data breach reported to it.","causal_attribution":"PDPC statement to The Straits Times."}],"effects":[{"label":"the email addresses of 95,364 members were each disclosed to up to 999 other recipients of a marketing email","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.stomp.sg/trending-now/bee-cheng-hiang-customers-e-mail-addresses-exposed-first-case-ai-related-data-breach-spore","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-10-02 on Stomp, which carries The Straits Times article by Kenny Chee dated 30 September 2026. The article relays the case details the PDPC published on 21 September and statements the PDPC gave The Straits Times.","independence_group":"pdpc-bee-cheng-hiang"},{"id":"s2","url":"https://mothership.sg/2026/10/bee-cheng-hiang-members-data-breach-ai/","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-10-02. Mothership (1 October 2026) attributes its account to the PDPC, so it shares the PDPC reporting chain with s1.","independence_group":"pdpc-bee-cheng-hiang"},{"id":"s3","url":"https://www.asiaone.com/singapore/bee-cheng-hiang-customers-email-addresses-exposed-ai-generated-code-breach","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-10-02. AsiaOne (1 October 2026) relays the same PDPC case details and attributes some of them to the company.","independence_group":"pdpc-bee-cheng-hiang"}],"version":1,"ai_roles":["institutional_use"],"contexts":["privacy","everyday_life"],"unknowns":["Which generative AI tool the employee used.","Whether any affected member received unwanted contact or suffered any consequence after the disclosure.","Where the affected members live.","The full text of the PDPC case page and undertaking, which could not be read from this host."],"geography":{"basis":"The Straits Times describes the breach as Singapore's first reported case of AI-related data breach, and Mothership calls it the first AI-related data breach in Singapore that the PDPC has been notified of. The sources do not state where the affected members live.","court_countries":[],"event_countries":["SG"],"affected_person_countries":[]},"publication":{"basis":"Published as a concrete institutional privacy incident: Singapore's data protection regulator found that a script a company employee wrote with a generative AI tool disclosed the email addresses of more than 95,000 members (95,364 according to Mothership) to other recipients. The facts rest on the PDPC's findings as relayed by The Straits Times, Mothership and AsiaOne; the PDPC page itself was not read. The AI tool did not communicate with, act for, decide about, make claims about or depict the members, so the person relation is recorded as unknown. No individual is named.","reviewed_on":"2026-10-02"},"ai_involvement":{"basis":"The PDPC, after investigating the company's notification, states that a marketing employee wrote the email distribution script with a generative AI tool and that the generated code put each batch of addresses into a single To field. The PDPC also states that the tool did not malfunction and that the prompt omitted any instruction to hide recipients. The PDPC's own case page could not be read from this host, so these findings are taken from The Straits Times, Mothership and AsiaOne reports that relay it.","status":"supported"},"person_relations":["unknown"]},"name":"Singapore: a Bee Cheng Hiang marketing employee used a generative AI tool to write a bulk-email script that put up to 1,000 members' addresses in each email's To field, disclosing the email addresses of 95,364 members","summary":"On 25 April 2026 Bee Cheng Hiang, the Singapore bak kwa and food products company, sent a marketing email in batches of 1,000 with every recipient's address visible in the To field, so each affected member's email address was disclosed to up to 999 other recipients. Mothership, reporting the findings of the Personal Data Protection Commission (PDPC), puts the number of affected members at 95,364 (The Straits Times says more than 95,000), and the PDPC says email addresses were the only personal data involved. According to the PDPC, an employee had written the email distribution script with a generative AI tool and the prompt did not ask for recipients to be hidden from one another. Mothership reports that a missing bracket in the generated code grouped each batch into one To field. The PDPC says the AI tool did not malfunction and attributes the breach to human error in developing the code with an AI tool. It says the incident likely happened because the company did not test the script sufficiently, had no supervisory review of the employee's work and had no policy on staff use of generative AI. It reports no evidence of further misuse. The company notified the PDPC on 27 April, notified affected members, and gave a voluntary undertaking that the PDPC accepted on 2 September. The PDPC told The Straits Times it was the first AI-related data breach reported to it.","incidentDate":"2026-04-25","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"unknown","reportedDate":"2026-09-21","aiSystem":"An unnamed generative AI tool that a Bee Cheng Hiang marketing employee used to write a Python script for sending bulk marketing email (PDPC, as relayed by The Straits Times and Mothership)","aiProduct":"Unidentified code-generation tool","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"The email addresses of Bee Cheng Hiang members (95,364 according to Mothership; more than 95,000 according to The Straits Times) were disclosed, each to up to 999 other recipients of the same marketing email, because of a script an employee wrote with a generative AI tool. The PDPC reports no evidence of further misuse (PDPC findings as reported by The Straits Times and Mothership).","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":0,"otherPeopleHarmedMin":95000,"affectedCountStatus":"documented_minimum","affectedCountEvidence":"The Straits Times, reporting the PDPC findings, says more than 95,000 Bee Cheng Hiang customers had their e-mail addresses exposed, and Mothership puts the number of members at 95,364. Each affected member's email address was disclosed to up to 999 other recipients in the same batch (Mothership), which is the privacy consequence this record reports. The count is a documented minimum of 95,000, taken from The Straits Times' lower bound. No source reports a further consequence, and the PDPC reports no evidence of further misuse. The employee is not counted.","victimAgeRange":"unknown","jurisdiction":"SG","platformType":"assistant","outcomeType":"regulatory_action","outcomeStatus":"ongoing","primarySourceUrl":"https://www.stomp.sg/trending-now/bee-cheng-hiang-customers-e-mail-addresses-exposed-first-case-ai-related-data-breach-spore","primarySourceLabel":"The Straits Times via Stomp, 30 September 2026: Bee Cheng Hiang customers' e-mail addresses exposed in first case of AI-related data breach in S'pore","firstPublishedAt":"2026-10-02T03:15:09.888989+00:00","updatedAt":"2026-10-02T03:15:09.888989+00:00","scopeVersion":"facts-v3","tags":["singapore","pdpc","data-breach","personal-data","ai-generated-code","email","institutional-use"]}]}