{"meta":{"exportedAt":"2026-10-16T07:26:58.831Z","formatVersion":2,"selection":{"q":"recording","system":"","harm":"","context":"","country":"","role":"","relation":"unknown","evidence":"","year":"2026","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":1,"coverage":{"cases":1,"countries":1,"languages":1,"unknownLocation":0,"locationPending":0,"unknownLanguage":0,"unknownDate":0,"lawsuits":0,"regulatory":0,"minors":0,"coreRelations":0,"contextualRelations":0,"mixedRelations":0,"unknownRelations":1,"relationPending":0,"relationUnknown":1},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2026-meta-mci-us-employee-keystroke-and-screen-capture-for-ai-training-then-internal-data-exposure","caseFacts":{"claims":[{"id":"c1","status":"corroborated","evidence":[{"locator":"Meta is installing tracking software on U.S. employees’ work computers that will capture mouse movements, clicks, and keystrokes, along with some screenshots to feed the data into its AI training pipeline, according to Reuters.","relation":"supports","source_id":"s1"},{"locator":"will run on a designated list of work apps and websites.","relation":"supports","source_id":"s1"},{"locator":"The company added that safeguards are in place to protect sensitive content and that the data will not be used for any other purpose.","relation":"context","source_id":"s1"},{"locator":"allows Meta to observe and collect data from staffers' actions on their work computers","relation":"supports","source_id":"s3"},{"locator":"A Meta spokesperson confirmed the project","relation":"supports","source_id":"s3"},{"locator":"To help, we're launching an internal tool that will capture these kinds of inputs on certain applications to help us train our models.","relation":"supports","source_id":"s3"},{"locator":"It’s a piece of mandatory software that Meta began installing on the laptops of US employees last month.","relation":"supports","source_id":"s4"},{"locator":"The company positioned the program as an opportunity for Meta employees to “help our models get better simply by doing their daily work,” with a promise that the information would not be used for performance reviews or other potentially invasive purposes.","relation":"context","source_id":"s2"}],"assertion":"From April 2026 Meta installed software on US employees' work computers that captures mouse movements, clicks, keystrokes and screen content on a designated list of applications and sites, and Meta said the inputs are used to train its AI models.","causal_attribution":"Meta's own statement of purpose (training its models) is quoted by several outlets from the same company statement. Reuters' original memo report could not be read (HTTP 401 and no archive copy), so the Reuters chain is inspected only through Fortune and Gizmodo. CNBC and WIRED report from their own internal messages and sources."},{"id":"c2","status":"reported","evidence":[{"locator":"When MCI launched, employees couldn’t opt out, but that changed to a limited degree after workers protested.","relation":"supports","source_id":"s6"},{"locator":"It’s a piece of mandatory software that Meta began installing on the laptops of US employees last month.","relation":"supports","source_id":"s4"},{"locator":"Meta this month began offering more exemptions to the monitoring, including letting staffers briefly turn off the surveillance so they could complete sensitive tasks, such as scheduling a personal appointment","relation":"supports","source_id":"s5"},{"locator":"can control what shows up on your screen by not doing personal work on your work computer,\" the memo said.","relation":"context","source_id":"s3"}],"assertion":"WIRED reports that MCI was mandatory software for US employees and that at launch employees could not opt out. WIRED also reports, citing two people familiar with the matter, that in June 2026 Meta began offering more exemptions, including letting staffers briefly turn off the tracking for sensitive tasks.","causal_attribution":"WIRED reports the opt-out position from its own sources. The CNBC memo excerpt shows Meta's launch-time answer to employees' concerns."},{"id":"c3","status":"reported","evidence":[{"locator":"Multiple Meta employees characterized the data-tracking project as \"dystopian\" in internal messages viewed by CNBC.","relation":"supports","source_id":"s3"},{"locator":"Others expressed concerns that MCI could widely expose sensitive data, including user passwords, details about new product development, and personal information about workers' immigration status, health or family members.","relation":"supports","source_id":"s3"},{"locator":"“Selfishly, I don't want my screen scraped because it feels like an invasion of my privacy,” wrote an engineer in an internal post seen by nearly 20,000 coworkers this week.","relation":"supports","source_id":"s4"}],"assertion":"Employees objected internally: CNBC reports multiple employees called the project \"dystopian\" in internal messages and others worried it could expose sensitive data such as passwords and personal information, and WIRED quotes an engineer's internal post, seen by nearly 20,000 coworkers, saying having the screen scraped felt like an invasion of privacy.","causal_attribution":"Employees' own stated concerns as quoted by CNBC and WIRED from internal messages. These are reported reactions and concerns, and neither outlet reports that the concerns had materialised at that point."},{"id":"c4","status":"reported","evidence":[{"locator":"Meta employees at several US offices walked into meeting rooms, broke for coffee at vending machines, and used the restrooms only to find pamphlets denouncing the company’s new mouse-tracking software as an “Employee Data Extraction Factory” and urging staff to sign an online petition against it.","relation":"supports","source_id":"s7"},{"locator":"In Meta offices in California and New York, workers have been posting flyers in cafeterias and other communal areas pointing colleagues to the petition.","relation":"supports","source_id":"s4"},{"locator":"Last month, more than 1,600 employees at the tech giant signed an internal petition protesting the laptop surveillance effort","relation":"supports","source_id":"s5"}],"assertion":"In May 2026 flyers appeared in US offices pointing staff to a petition against the programme, and WIRED reported in June that more than 1,600 employees had signed an internal petition protesting it.","causal_attribution":"The TNW piece relays Reuters reporting on the flyers. WIRED reports the flyers and the signature count from its own sources."},{"id":"c5","status":"reported","evidence":[{"locator":"Meta left potentially sensitive information collected from employee laptops accessible to anyone inside the company, according to an internal security notice seen by WIRED and three current employees familiar with the issue.","relation":"supports","source_id":"s5"},{"locator":"The security notice sent out Monday indicated that “employee data across 45,000 hive tables,” had been exposed.","relation":"supports","source_id":"s5"},{"locator":"Those tables included employee activity such as “full prompts and transcriptions, private conversations, people and performance data,” according to documents viewed by WIRED.","relation":"supports","source_id":"s5"},{"locator":"we have no indication at this time that any data was improperly accessed by Meta employees, we're pausing it while we investigate,","relation":"supports","source_id":"s5"},{"locator":"The issue made “some MCI-derived data” accessible to more people than intended","relation":"supports","source_id":"s6"}],"assertion":"According to WIRED, an internal security notice sent on 22 June 2026 said employee data across 45,000 hive tables had been exposed to anyone inside Meta, including \"full prompts and transcriptions, private conversations, people and performance data\". Meta said it had no indication the data was improperly accessed and paused the programme.","causal_attribution":"WIRED reports the exposure from an internal security notice and current employees, and a Meta vice president's note to staff confirmed that some MCI-derived data was accessible to more people than intended. WIRED says the data \"is believed to include\" keystrokes, mouse clicks and screen content and that it was not immediately clear whether AI played a role in the access-control failure. No source reports that anyone misused the data."},{"id":"c6","status":"reported","evidence":[{"locator":"said that the tracking program’s implementation had fallen short of the standards outlined in its privacy review","relation":"supports","source_id":"s5"},{"locator":"the security issue had been discovered on June 18 and addressed within four hours. But the initial fix didn’t stick and access to the data had to be further locked down.","relation":"supports","source_id":"s6"},{"locator":"“We will only re-enable MCI when we are confident in the effectiveness of our data protection controls,”","relation":"supports","source_id":"s6"}],"assertion":"WIRED reports that Meta's chief technology officer said in an internal post that the programme's implementation had fallen short of the standards in its privacy review, and that a Meta vice president told staff the issue was discovered on 18 June and addressed within four hours, that the initial fix did not hold and access had to be locked down further, and that MCI would be re-enabled only when Meta was confident in its data protection controls.","causal_attribution":"Internal statements by Meta executives as reported by WIRED from posts it saw. They are the company's own account of its conduct and stay at reported."}],"effects":[{"label":"US employees required to run software recording their keystrokes, mouse activity and screen content for AI training, initially with no opt-out","claim_id":"c2","direction":"negative"},{"label":"Captured employee activity data left accessible to anyone inside the company (discovered 18 June 2026), with Meta reporting no indication of improper access","claim_id":"c5","direction":"negative"}],"sources":[{"id":"s1","url":"https://fortune.com/2026/04/21/meta-will-start-tracking-employees-screens-and-keystrokes-to-train-ai/","kind":"news_relay","access":"read","language":"en","translation_note":"","independence_group":"reuters-mci-memo-2026-04-21"},{"id":"s2","url":"https://gizmodo.com/meta-plans-to-turn-its-employees-clicks-and-keystrokes-into-ai-training-data-2000749176","kind":"news_relay","access":"read","language":"en","translation_note":"","independence_group":"reuters-mci-memo-2026-04-21"},{"id":"s3","url":"https://www.cnbc.com/2026/04/22/meta-tracks-employee-usage-on-google-linkedin-ai-training-project.html","kind":"news_report","access":"read","language":"en","translation_note":"Read from an Internet Archive capture (23 Apr 2026) because the live page returned HTTP 403.","independence_group":"cnbc-mci-internal-messages"},{"id":"s4","url":"https://www.wired.com/story/meta-employee-protest-mouse-tracking-surveillance-ai-training/","kind":"original_news_reporting","access":"read","language":"en","translation_note":"","independence_group":"wired-mci-reporting"},{"id":"s5","url":"https://www.wired.com/story/meta-accidentally-let-employees-access-each-others-keystroke-data/","kind":"original_news_reporting","access":"read","language":"en","translation_note":"","independence_group":"wired-mci-reporting"},{"id":"s6","url":"https://www.wired.com/story/meta-pauses-employee-tracking-program-following-internal-security-breach/","kind":"original_news_reporting","access":"read","language":"en","translation_note":"","independence_group":"wired-mci-reporting"},{"id":"s7","url":"https://thenextweb.com/news/meta-mouse-tracking-protest-layoffs","kind":"news_relay","access":"read","language":"en","translation_note":"","independence_group":"reuters-mci-protest-2026-05-12"}],"version":1,"ai_roles":["institutional_use"],"contexts":["work","privacy"],"unknowns":["Reuters' original reports (21 April memo, 12 May protest, 22 June exposure) could not be read (HTTP 401 direct, and every Internet Archive capture tried for April, May and June 2026 was an anti-bot stub). Reuters detail is taken only from the Fortune, Gizmodo and The Next Web relays.","No source states how many employees' data was in the exposed tables or how many employees are covered by MCI.","No inspected source states when the access-control misconfiguration began or how long the data was accessible. Meta's vice president said the issue was discovered on 18 June 2026 and that the first fix did not hold, and WIRED quotes the chief technology officer as saying the setup had misconfigured access control lists.","A separate complaint, Does 1 through 26 v. Meta Platforms (N.D. Cal., filed 13 July 2026), is covered in the record 2026-us-meta-26-employees-sue-alleging-ai-assisted-may-layoff-selection-penalized-protected-leave. It alleges on information and belief that keystroke and screen-content monitoring data supplied inputs to AI-assisted layoff scoring, and Meta denies that AI was used in the selection. That allegation is not part of this record, and no source inspected for this record reports a job consequence for an employee from MCI data.","Whether anyone accessed or misused the exposed data is unknown. Meta said it had no indication of improper access at the time of the pause.","Some aggregator articles say the exposed data included tax and medical records. An employee's comment cited by Reuters (via eWeek) only said personal tax and medical information is accessible through work computers, and eWeek says there was no confirmation those details were in the exposed records, so it is not recorded.","WIRED's report that Meta removed some protest posters rests on two anonymous employees and Meta declined to comment, so it is not recorded as a fact.","Whether the pause is permanent or MCI later resumed was not established beyond the 22 June 2026 announcement."],"geography":{"basis":"Fortune and WIRED report the tracking running on US employees' work computers and WIRED says only US employees are currently subject to it. The country is not taken from the company's headquarters.","court_countries":[],"event_countries":["US"],"affected_person_countries":["US"]},"publication":{"basis":"Fortune, Gizmodo, CNBC (Internet Archive capture), The Next Web and three WIRED articles were read in full. Meta's statements and its executives' internal posts are the company's own account of its conduct and stay at reported. The launch and the exposure rest on separate reporting chains (Reuters via relays, CNBC's own messages, WIRED's own sources) but the exposure is inspected only through WIRED and one Meta executive's note quoted by WIRED. No employee is named.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"A Meta spokesperson said the tool captures inputs on certain applications to help train Meta's models, which is the company's own account of the AI purpose. The AI role is as the reason for the data collection. No inspected source describes an AI output, decision or action affecting an employee, and WIRED says it was not immediately clear whether AI played a role in the access-control failure.","status":"reported"},"person_relations":["unknown"]},"name":"US: Meta records employees' keystrokes and screens to train AI agents, then leaves some of the captured data accessible company-wide and pauses the programme","summary":"From April 2026 Meta installed its Model Capability Initiative (MCI) on US employees' work computers, recording mouse movements, clicks, keystrokes and screen content on designated apps and sites so that its AI agents could learn how people use software. Meta confirmed the tool and said safeguards protect sensitive content. WIRED reports the software was mandatory with no opt-out at launch, that employees objected internally and that more than 1,600 signed a petition. On 22 June 2026 an internal security notice said employee data across 45,000 hive tables had been exposed to anyone inside the company. Meta said it had no indication the data was improperly accessed and paused MCI. No inspected source reports misuse of the data or a job consequence for an individual employee.","incidentDate":"2026-04-01","incidentEndDate":"2026-06-22","incidentKind":"bounded_series","incidentDatePrecision":"range","exposurePattern":"unknown","reportedDate":"2026-04-21","aiSystem":"Model Capability Initiative (MCI): Meta's internal software capturing employee computer inputs and screen content to train AI agents","aiProduct":"Meta Model Capability Initiative","aiCompany":"Meta Platforms","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["loss_of_autonomy","other_material_harm"],"harmOutcomeSummary":"WIRED reports that Meta made the recording software mandatory for US employees, with no opt-out at launch, and that in June 2026 an internal notice said employee data across 45,000 hive tables was exposed to anyone inside the company. Meta said it had no indication the data was improperly accessed. No inspected source reports misuse of the data or a consequence for an individual employee.","frameworkFacets":[],"causationStatus":"unclear","participantUsersAffectedMin":0,"otherPeopleHarmedMin":0,"affectedCountStatus":"unquantified","affectedCountEvidence":"No inspected source counts employees harmed. The programme covers US employees, the exposure notice gives no number of affected employees, and the 1,600 petition signers are not counted as harmed people. Numeric zeros are placeholders.","victimAgeRange":"adult","platformType":"other","primarySourceUrl":"https://www.wired.com/story/meta-accidentally-let-employees-access-each-others-keystroke-data/","primarySourceLabel":"WIRED (22 Jun 2026)","firstPublishedAt":"2026-09-29T21:16:02.93024+00:00","updatedAt":"2026-09-30T01:17:45.697526+00:00","scopeVersion":"facts-v3","tags":["historical-2026"]}]}