{"meta":{"exportedAt":"2026-10-16T07:36:52.051Z","formatVersion":2,"selection":{"q":"recovery","system":"","harm":"","context":"","country":"","role":"","relation":"core","evidence":"","year":"unknown","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":9,"coverage":{"cases":9,"countries":3,"languages":3,"unknownLocation":6,"locationPending":0,"unknownLanguage":0,"unknownDate":9,"lawsuits":0,"regulatory":0,"minors":0,"coreRelations":9,"contextualRelations":0,"mixedRelations":0,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2026-character-ai-user-says-years-of-addiction-caused-writing-slump-ended-by-deleting-account-first-person","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'I was addicted to C.AI for years. I tried to quit on and off, but it never stuck until two weeks ago.'","relation":"supports","source_id":"s2"},{"locator":"'I’m a recovering chatbot addict'","relation":"supports","source_id":"s1"}],"assertion":"The poster says they were addicted to Character.AI for years and tried to quit on and off without success until they deleted their account.","causal_attribution":"Poster's account of their own use."},{"id":"c2","status":"reported","evidence":[{"locator":"'my C.AI addiction put me in a very long writing slump and destroyed my motivation to write'","relation":"supports","source_id":"s2"}],"assertion":"The poster says the addiction put them in a very long writing slump and destroyed their motivation to write.","causal_attribution":"Poster's attribution of the slump to the addiction."},{"id":"c3","status":"reported","evidence":[{"locator":"'I deleted my entire account in a burst of anger over the swipe limit I eventually ended up getting'","relation":"supports","source_id":"s2"},{"locator":"'I already quit cold turkey several months ago by deleting my entire account (and my chats by extension)'","relation":"supports","source_id":"s1"}],"assertion":"The poster says they deleted their entire Character.AI account, and with it their chats, in anger over a swipe limit about two weeks before 11 June 2026, and quit.","causal_attribution":"Poster's account."},{"id":"c4","status":"reported","evidence":[{"locator":"'there were some days I had the urge to make a new account on c.ai'; 'I’d even have *dreams* about me making an account on c.ai and continuing to chat'","relation":"supports","source_id":"s1"}],"assertion":"The poster says that in the first months after quitting they had urges to make a new account and dreamed about doing so.","causal_attribution":"Poster's account."},{"id":"c5","status":"reported","evidence":[{"locator":"'I don’t wrestle with feelings of guilt over using AI'","relation":"supports","source_id":"s3"},{"locator":"'I’m spending much more time with my family'","relation":"supports","source_id":"s1"}],"assertion":"The poster says that since quitting they no longer feel guilt over using AI, write again and spend more time with family.","causal_attribution":"Poster's account of recovery after quitting."},{"id":"c6","status":"reported","evidence":[{"locator":"'Due to genetics, I’ve probably already had a predisposition to addiction; it just manifested as a chatbot addiction instead of an alcohol addiction.'","relation":"supports","source_id":"s1"}],"assertion":"The poster says they believe a genetic predisposition to addiction contributed to their chatbot addiction.","causal_attribution":"Poster's own explanation, recorded as a contributing factor that qualifies the AI's role."}],"effects":[{"label":"years of addiction to Character.AI with repeated failed attempts to quit (poster's account)","claim_id":"c1","direction":"negative"},{"label":"long writing slump and lost motivation to write attributed to the addiction (poster's account)","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.reddit.com/r/antiai/comments/1x6yah9/characterais_bankruptcy_from_the_perspective_of/","kind":"forum_post","access":"read","language":"en","translation_note":"Read in English on 2026-10-16: full self-text and the post (no comments at retrieval) retrieved through the arctic_shift archive API by post ID (reddit.com returned 403 and 429 to this host). The poster handle is not recorded.","independence_group":"reddit-antiai-character-ai-recovery-poster"},{"id":"s2","url":"https://www.reddit.com/r/antiai/comments/1u2n9fi/two_weeks_clean_of_characterai_and_im_feeling/","kind":"forum_post","access":"read","language":"en","translation_note":"Read in English on 2026-10-16: full self-text and the post and its 19 comments, one of them a reply by the poster, retrieved through the arctic_shift archive API by post ID (reddit.com returned 403 and 429 to this host). The poster handle is not recorded.","independence_group":"reddit-antiai-character-ai-recovery-poster"},{"id":"s3","url":"https://www.reddit.com/r/antiai/comments/1uoj1yj/six_weeks_clean_of_characterai_and_i_feel_like_im/","kind":"forum_post","access":"read","language":"en","translation_note":"Read in English on 2026-10-16: full self-text and the post and its 15 comments, none by the poster, retrieved through the arctic_shift archive API by post ID (reddit.com returned 403 and 429 to this host). The poster handle is not recorded.","independence_group":"reddit-antiai-character-ai-recovery-poster"}],"version":1,"ai_roles":["own_use"],"contexts":["everyday_life"],"unknowns":["When the poster's use of Character.AI began, how much time they spent on it and how old they were during it.","The content of the chats, which the poster deleted with the account.","Whether the poster sought any clinical or other help; none is reported.","Where the poster lives or used the app.","Whether Character.AI was aware of or responded to the poster's use; no contact is reported."],"geography":{"basis":"None of the posts says where the poster lives or used the app. The subreddit and the vocabulary of the posts are not evidence of location.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Published under the public-forum rule as a first-person account, in three posts by one author, of years of compulsive Character.AI use that the poster says stalled their writing and ended only when they deleted the account. Described with attribution and without corroboration; the poster's own view that a genetic predisposition contributed is recorded.","reviewed_on":"2026-10-16"},"ai_involvement":{"basis":"The poster says the experience was their own use, over years, of Character.AI, a chatbot app on which, in their words, users talk to AIs 'wearing the faces of your favorite characters'. They connect those exchanges to an addiction they could not break by repeated attempts, to a very long writing slump and lost motivation to write, and to guilt over using AI, all of which they say ended after they deleted the account. No chat content, usage time or product feature other than a swipe limit is described, and the poster also points to a genetic predisposition to addiction.","status":"reported"},"person_relations":["communicated_with"]},"name":"First-person posts: Character.AI user says years of addiction stalled their writing and ended only when they deleted their account","summary":"In three public posts to r/antiai, on 11 June, 6 July and 15 October 2026, a person who calls themselves a recovering chatbot addict writes that they were addicted to Character.AI for years and tried to quit on and off without success. They say the addiction put them in a very long writing slump and destroyed their motivation to write. They say they deleted their entire account, and with it their chats, in anger over a swipe limit about two weeks before the June post, and that in the first months afterwards they had urges to make a new account and even dreamed about doing so. Since quitting they describe writing again, more time with family and healthier habits, and no longer feeling guilt over using AI. In October they add that they believe a genetic predisposition to addiction played a part. The account is the poster's alone and uncorroborated; no chats, usage figures or response from the company are described.","incidentKind":"ongoing_experience","incidentDatePrecision":"unknown","exposurePattern":"repeated_interactions","reportedDate":"2026-06-11","aiSystem":"Character.AI, a chatbot app on which, in the poster's words, users talk to AIs 'wearing the faces of your favorite characters' (poster's account; no chats or usage figures shown)","aiProduct":"Character.AI (reported)","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["functional_impairment","psychological_distress"],"harmOutcomeSummary":"The poster says years of Character.AI addiction, with repeated failed attempts to quit, put them in a very long writing slump and destroyed their motivation to write, and that they felt guilt over using AI until they deleted the account (first-person account, uncorroborated).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person: the poster, who describes their own use of Character.AI. Commenters' accounts of their own use are not counted.","victimAgeRange":"unknown","platformType":"companion","outcomeStatus":"resolved","primarySourceUrl":"https://www.reddit.com/r/antiai/comments/1x6yah9/characterais_bankruptcy_from_the_perspective_of/","primarySourceLabel":"r/antiai, 15 Oct 2026: \"Character.AI’s bankruptcy: from the perspective of an ex C.AI addict\"","firstPublishedAt":"2026-10-16T03:05:30.064129+00:00","updatedAt":"2026-10-16T03:05:30.064129+00:00","scopeVersion":"facts-v3","tags":["first-person","reddit","character-ai","dependency","recovery","writing"]},{"id":"2026-cursor-agent-delete-command-quote-parsing-wiped-windows-d-drive-chat-history-projects-first-person-forum","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'Cursor Agent, running in autonomous (Agent) mode'; 'recursively deleting the entire D: drive'; 'This permanently destroyed (no Recycle Bin)'; 'WeChat chat history database'; 'multiple source-code projects'; 'installed applications'","relation":"supports","source_id":"s1"}],"assertion":"The author says that the Cursor agent, running in autonomous Agent mode, executed a command that recursively deleted their entire D: drive and permanently destroyed, with no Recycle Bin, a WeChat chat history database, multiple source-code projects and installed applications.","causal_attribution":"The author attributes the loss to the agent's command; the extent of the loss is described only by the author."},{"id":"c2","status":"corroborated","evidence":[{"locator":"'Cursor Agent, running in autonomous (Agent) mode, executed a Windows cmd command intended to delete a single deprecated project directory'; 'the rd /s /q command was applied to the D:\\ drive ROOT instead of the target subdirectory'","relation":"supports","source_id":"s1"},{"locator":"'Using the session ID you shared, we found the run and can see the command that caused this'; 'rd /s /q received the root of the current drive (D:) as an extra target alongside the folder you wanted removed'","relation":"supports","source_id":"s2"}],"assertion":"The Cursor agent executed a cmd /c rd /s /q command intended to delete a single project subdirectory, and because the quote in the command was not parsed as intended the command was applied to the root of the D: drive.","causal_attribution":"The author's report and the agent's quoted transcript describe the command; Cursor's staff reply independently confirms the run and the command from the session record. The two accounts differ on the parsing detail (truncation at the quote versus the root added as an extra target)."},{"id":"c3","status":"reported","evidence":[{"locator":"'The Agent later self-admitted in the session transcript'; 'Logs show it ran for ~105 seconds'","relation":"supports","source_id":"s1"}],"assertion":"The author says the agent later stated in the session transcript that Windows cmd did not parse the escaped quote as expected, that the command recursively deleted the D: root instead of the target subdirectory, and that logs show it ran for about 105 seconds.","causal_attribution":"Quoted by the author from a transcript not shared publicly."},{"id":"c4","status":"documented","evidence":[{"locator":"'What you described matches an issue we’re already tracking, and I’ve added your report to it'; 'run a recovery tool (for example Recuva, PhotoRec or TestDisk) from another drive'; 'Which run mode was the Agent using at the time?'; 'Did an approval prompt appear for that delete command, or did it run on its own?'","relation":"supports","source_id":"s2"}],"assertion":"A Cursor staff member replied that the report matches an issue the company is already tracking, recommended recovery tools, and asked which run mode was active and whether an approval prompt appeared for the delete command.","causal_attribution":"Directly established by the staff reply itself."}],"effects":[{"label":"entire D: drive recursively deleted by an agent command, destroying a chat history database, source-code projects and installed applications (author's account)","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://forum.cursor.com/t/174156","kind":"first_person_account","access":"read","language":"en","translation_note":"Read in English on 2026-10-10 through the forum's JSON endpoint (opening post and the staff reply). No translation was needed; the research agent (an AI) read the text directly. The author's handle is not recorded.","independence_group":"cursor-forum-174156-author"},{"id":"s2","url":"https://forum.cursor.com/t/174156/5","kind":"company_statement","access":"read","language":"en","translation_note":"Staff reply (marked staff and admin by the forum) in the same thread, read in English on 2026-10-10 through the forum's JSON endpoint; no translation was needed. The research agent (an AI) read the text directly.","independence_group":"cursor-staff-reply-174156"}],"version":1,"ai_roles":["own_use"],"contexts":["everyday_life","work"],"unknowns":["When the deletion happened.","Which run mode was active and whether an approval prompt appeared for the command.","How much of the deleted data was recovered.","Where the author lives.","What the issue Cursor says it is already tracking covers."],"geography":{"basis":"Neither post says where the author is; no country is inferred from the language of the deleted path or the forum.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Published under the charter's public first-person rule as a concrete account of an AI coding agent's delete command destroying a user's whole data drive, with the loss attributed to the author's forum report and the command and its cause confirmed in a Cursor staff reply read in the same thread. The author's handle is not recorded.","reviewed_on":"2026-10-10"},"ai_involvement":{"basis":"The report states what the agent did: in autonomous Agent mode it executed a cmd /c rd /s /q command meant for one project subdirectory, which the author says cmd.exe mis-parsed so that the command ran against the D: drive root for about 105 seconds, and the author quotes the agent's own transcript admission to that effect. A Cursor staff reply in the thread says the company found the run from the session ID, can see the command that caused the deletion, and explains that the quote was not escaped so rd /s /q received the drive root as an extra target. The report connects the command to the permanent loss of the author's chat history database, projects and applications; the loss itself is described only by the author.","status":"reported"},"person_relations":["acted_on_behalf"]},"name":"Forum report: a quoting error in a Cursor agent delete command wiped a user's entire D: drive (chat history, projects); Cursor staff say they found the run","summary":"In a report posted to the Cursor community forum on 9 October 2026, a user says that the Cursor agent, running in autonomous Agent mode, executed a Windows cmd command meant to delete one deprecated project directory, and that because cmd.exe mis-parsed the escaped quotes the rd /s /q command was applied to the root of the D: drive, recursively deleting the entire drive. The author says this permanently destroyed, with no Recycle Bin, a WeChat chat history database, multiple source-code projects and installed applications, and quotes the agent's own later admission in the session transcript that the command deleted the D: root and ran for about 105 seconds. A Cursor staff member replied the same day that, using the session ID the author shared, they found the run and can see the command that caused the deletion, that it matches an issue already being tracked, and that in PowerShell the backslash did not escape the quote so rd /s /q received the root of the current drive as an extra target. The event date is not stated and the extent of recovery is unknown.","incidentKind":"single_event","incidentDatePrecision":"unknown","exposurePattern":"single_interaction","reportedDate":"2026-10-09","aiSystem":"The Cursor coding agent in autonomous Agent mode on a Windows machine, using a mix of models the author lists as gemini-3.8-flash-high and composer-2.5-fast; it issued a cmd /c rd /s /q command for a project subdirectory whose path contained non-ASCII characters and nested backslashes","aiProduct":"Cursor coding agent","severity":"medium","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["property_loss","other_material_harm"],"harmOutcomeSummary":"The author reports that a Cursor agent delete command, mis-parsed by Windows cmd, recursively deleted their entire D: drive, permanently destroying a chat history database, multiple source-code projects and installed applications; Cursor staff say they found the run and the command and that the drive root was received as an extra delete target (first-person forum report with a vendor reply).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person: the author of the forum report. Exact 1.","victimAgeRange":"unknown","jurisdiction":"unknown","platformType":"agent","outcomeStatus":"ongoing","primarySourceUrl":"https://forum.cursor.com/t/174156","primarySourceLabel":"Cursor community forum, report of 9 October 2026: '[Agent] Autonomous rd /s /q wiped the entire D: drive (Windows)'","firstPublishedAt":"2026-10-10T03:33:44.128202+00:00","updatedAt":"2026-10-11T07:32:40.805479+00:00","scopeVersion":"facts-v3","tags":["first-person","forum-post","cursor","ai-agent","coding-agent","data-loss","file-deletion","windows","acted-on-behalf"]},{"id":"2026-lahore-loan-app-recovery-network-ai-obscene-images-borrower-blackmail-nccia-raid","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'Authorities arrested 39 people, 38 men and one woman, during a raid on a network allegedly operating under the name'; 'exposed alleged illegal loan recovery network in Lahore'","relation":"supports","source_id":"s1"}],"assertion":"Pakistan’s NCCIA raided an alleged illegal loan-recovery network in Lahore and arrested 39 people, 38 men and one woman.","causal_attribution":"NCCIA case details as reported by Daily Pakistan."},{"id":"c2","status":"reported","evidence":[{"locator":"'borrowers’ contacts and photo galleries were accessed through the apps. When repayments were delayed or additional money was demanded, operators allegedly used artificial intelligence to manipulate victims’ photographs into fake obscene images'","relation":"supports","source_id":"s1"}],"assertion":"Investigators allege that the network accessed borrowers’ contacts and photo galleries through illegal loan apps and, when repayments were delayed or more money was demanded, used artificial intelligence to manipulate the borrowers’ photographs into fake obscene images.","causal_attribution":"Investigators’ allegation as reported by Daily Pakistan; no image examined, tool not identified."},{"id":"c3","status":"reported","evidence":[{"locator":"'Victims were reportedly threatened with having the fabricated material sent to their family members and contacts unless they paid the demanded amounts'","relation":"supports","source_id":"s1"}],"assertion":"Victims were reportedly threatened with having the fabricated material sent to their family members and contacts unless they paid the demanded amounts.","causal_attribution":"Reported by Daily Pakistan from the case details; no victim account is quoted."},{"id":"c4","status":"reported","evidence":[{"locator":"'NCCIA recovered 40 laptops and 41 mobile phones during the operation. The seized devices and other digital material have been sent for forensic examination, while a criminal case has been registered'","relation":"supports","source_id":"s1"}],"assertion":"The NCCIA recovered 40 laptops and 41 mobile phones, sent them for forensic examination, registered a criminal case and is searching for further suspects.","causal_attribution":"NCCIA case details as reported by Daily Pakistan."}],"effects":[{"label":"borrowers’ photographs allegedly manipulated with AI into fake obscene images and used to threaten them into paying","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://en.dailypakistan.com.pk/06-Oct-2026/loan-apps-racket-busted-for-blackmailing-borrowers-with-ai-generated-explicit-pictures","kind":"news_report","access":"read","language":"en","translation_note":"Read in English by the research agent (an AI) on 2026-10-07 (HTTP 200); no translation was involved and no human reviewer read the article. Daily Pakistan staff report, published 6 October 2026, based on NCCIA case details.","independence_group":"dailypakistan-nccia-lahore-raid"}],"version":1,"ai_roles":["others_use"],"contexts":["finance","privacy"],"unknowns":["How many borrowers were threatened or paid, and whether any image was actually sent to a victim’s contacts.","When the lending and the threats took place; only the 6 October 2026 report date is known.","Which AI tool was used; the forensic examination of the seized devices was pending.","Whether the accused have been charged in court or have responded to the allegations."],"geography":{"basis":"The raid took place in Lahore and the lending is described as to citizens through loan apps in Pakistan; the NCCIA is a Pakistani federal agency. A criminal case is registered but no court is named.","court_countries":[],"event_countries":["PK"],"affected_person_countries":["PK"]},"publication":{"basis":"Published as a core case on a single attributed report: Daily Pakistan reports NCCIA investigators’ allegation that a Lahore loan-recovery network used AI to turn borrowers’ photographs into fake obscene images and threatened to send them to family and contacts unless they paid, and that 39 people were arrested and a criminal case registered. Every claim is attributed to the investigators; counts, dates and the tool are recorded as unknown.","reviewed_on":"2026-10-07"},"ai_involvement":{"basis":"Daily Pakistan reports NCCIA investigators’ allegation that operators used artificial intelligence to manipulate borrowers’ photographs into fake obscene images, and that victims were threatened with having that fabricated material sent to family members and contacts unless they paid. The AI-made images are the instrument of the alleged blackmail, and they depict the borrowers (depicted_or_impersonated). The tool is not identified, no image has been examined, and the allegation is the investigators’; the seized devices were still with forensic examiners at the time of the report.","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Lahore loan-app recovery network accused by Pakistan’s NCCIA of turning borrowers’ photos into fake obscene images with AI to force repayment; 39 arrested","summary":"Daily Pakistan reported on 6 October 2026 that Pakistan’s National Cyber Crime Investigation Agency (NCCIA) raided an alleged illegal loan-recovery network in Lahore and arrested 39 people. Investigators allege that the network lent money through illegal loan applications, gained access to borrowers’ contacts and photo galleries through the apps, and, when repayments were delayed or more money was demanded, used artificial intelligence to manipulate borrowers’ photographs into fake obscene images. Victims were reportedly threatened with having the fabricated material sent to their family members and contacts unless they paid. The agency says a criminal case has been registered and that seized devices have been sent for forensic examination. The number of borrowers targeted is not reported, and the allegations have not been tested in court.","incidentKind":"bounded_series","incidentDatePrecision":"unknown","exposurePattern":"repeated_interactions","reportedDate":"2026-10-06","aiSystem":"Artificial intelligence used, according to NCCIA investigators as reported by Daily Pakistan, to manipulate borrowers’ photographs into fake obscene images (tool not identified)","aiProduct":"Unidentified image tool","severity":"medium","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["exploitation_or_abuse"],"harmOutcomeSummary":"According to NCCIA investigators as reported by Daily Pakistan, borrowers had their photographs manipulated with AI into fake obscene images and were threatened with their distribution to family and contacts unless they paid; the number of people threatened and any payments are not reported.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":0,"affectedCountStatus":"unquantified","affectedCountEvidence":"No count of threatened borrowers is reported; the article speaks of borrowers and victims without a number, so both numeric fields are zero placeholders. The 39 arrested people are suspects, not harmed persons. People targeted in the separate Karachi 2025 and Rawalpindi 2026 raids are not counted.","victimAgeRange":"unknown","jurisdiction":"PK","platformType":"other","outcomeType":"criminal_charges","outcomeStatus":"ongoing","primarySourceUrl":"https://en.dailypakistan.com.pk/06-Oct-2026/loan-apps-racket-busted-for-blackmailing-borrowers-with-ai-generated-explicit-pictures","primarySourceLabel":"Daily Pakistan, 6 October 2026: Loan apps racket busted for blackmailing borrowers with AI-generated explicit pictures","firstPublishedAt":"2026-10-07T03:25:33.259105+00:00","updatedAt":"2026-10-07T03:25:33.259105+00:00","scopeVersion":"facts-v3","tags":["loan-app","extortion","ai-manipulated-images","sextortion","blackmail","lahore","pakistan","nccia","depicted-or-impersonated"]},{"id":"2026-cline-agent-cleanup-command-quoting-error-deleted-windows-data-drive-root-about-1-5-tb-first-person-issue","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'In Act mode, needed to clean a temp folder'; 'The nested escaping'; 'The path resolved to the drive root'; 'The text above was generated by the Cline AI agent on my behalf'","relation":"supports","source_id":"s1"}],"assertion":"The issue reports that, in Act mode, the Cline agent built a temp-folder cleanup command wrapping rmdir /s /q in cmd /c inside a PowerShell string, that the nested quoting was mangled and that the recursive delete ran against the G: data drive instead of the intended subfolder; the author says the agent wrote the issue text on their behalf.","causal_attribution":"The issue attributes the command to the agent's run_commands tool."},{"id":"c2","status":"reported","evidence":[{"locator":"'Result: recursive deletion of the drive's contents (~1.5 TB of the user's photos/videos/docs)'; 'only the code was recoverable (it was under git and pushed), user data was lost'; 'Recovery on an SSD was largely unsuccessful (TRIM)'","relation":"supports","source_id":"s1"}],"assertion":"The issue reports that about 1.5 TB of the user's photos, videos and documents and the project being edited were deleted, that only the code was recoverable from git, and that SSD recovery was largely unsuccessful.","causal_attribution":"User's account via the agent-written filing. The author later qualified the importance of the deleted data and reported a partial recovery (c5)."},{"id":"c3","status":"reported","evidence":[{"locator":"'I reproduced the mechanism in a sandbox. The path did not resolve to `G:`. The quoting gave `rmdir` a second target, `\\`, which is the root of the current drive, and `rmdir /s /q` deletes every target it is given.'","relation":"supports","source_id":"s1"}],"assertion":"A commenter reports reproducing the quoting mechanism in a sandbox: PowerShell ended the string at the first escaped quote, so rmdir received a bare backslash, the root of the current drive, as a second target.","causal_attribution":"Commenter's own sandbox test; establishes the mechanism, not the author's loss."},{"id":"c4","status":"reported","evidence":[{"locator":"'an Act-mode pre-tool guard for Windows PowerShell `run_commands`'; 'the existing command guard is registered only for Plan mode'","relation":"supports","source_id":"s1"}],"assertion":"A project contributor proposed an Act-mode pre-tool guard for Windows PowerShell run_commands and noted that the existing command guard is registered only for Plan mode.","causal_attribution":"Not applicable."},{"id":"c5","status":"reported","evidence":[{"locator":"'The PC was a new home machine, only a year old at the time of purchase, so I hadn't accumulated too many critical files in that year.'; 'a lot of that 1.5TB turned out to be junk anyway'; 'the mistake is entirely mine'; 'the model I was using was deepseek/deepseek-v4-flash'; 'P.S. I also managed to recover some files that were stored in other locations.'","relation":"supports","source_id":"s1"}],"assertion":"In a comment on 9 October 2026 the author wrote that the computer was a new home machine, only a year old, on which not many critical files had accumulated, that a lot of the 1.5 TB turned out to be junk, that some files stored in other locations had been recovered, and that the mistake was entirely the author's own; the author named the model as deepseek/deepseek-v4-flash.","causal_attribution":"The author's later statement; it qualifies the importance of the deleted material and reports a partial recovery, and does not withdraw the account of the deletion."},{"id":"c6","status":"reported","evidence":[{"locator":"'I don't think this will work.'; 'We decided it is better to simply have commands on or off, which is at least predictable.'; 'It looks like the model wrote `\\\"` when it should not have. So a stronger model or more prompting may help here.'; 'I'll bring it up with our product team.'","relation":"supports","source_id":"s1"}],"assertion":"A second contributor, writing for the project, replied that the proposed Act-mode guard would not work, that the project had decided to keep commands simply on or off, and that the model appeared to have written the escape sequence that split the command.","causal_attribution":"The contributor's reading of the commenter's reproduction; it attributes the faulty escape to the model and does not confirm the author's loss."}],"effects":[{"label":"about 1.5 TB of photos, videos and documents and the edited project deleted from the data drive; code recovered from git; the author later said much of the data was junk and some files were recovered from other locations (user's account)","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://github.com/cline/cline/issues/14864","kind":"first_person_account","access":"read","language":"en","translation_note":"Read in English on 2026-10-07: issue body and four comments retrieved through the GitHub API; re-read on 2026-10-11 with all 12 comments, including the second contributor's replies of 7 October and the author's comment of 9 October. The issue text is in English with a Cyrillic folder name and Russian-language Windows error strings quoted, which the research agent (an AI) read without translation. The author's handle is not recorded.","independence_group":"github-cline-14864-author"}],"version":1,"ai_roles":["own_use"],"contexts":["everyday_life"],"unknowns":["The date of the deletion; the issue gives none.","How much of the deleted personal data was permanently lost; the author later said a lot of it was junk and some files were recovered from other locations.","Where the author lives.","Whether Cline has shipped a fix."],"geography":{"basis":"The issue does not say where the author was or lives; a Cyrillic folder name and a Russian-language error message do not establish a country. No country is recorded.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Published under the charter's public first-person rule as a concrete account of an AI coding agent's own cleanup command deleting a user's personal drive contents, with the agent's authorship of the filing disclosed, the loss attributed to the user, the mechanism's reproduction attributed to a commenter and the project's reply to a contributor; uncorroborated as to the loss. The author's later qualification of how much of the deleted data mattered, the partial recovery and the author's acceptance of responsibility are recorded. The author's handle is not recorded.","reviewed_on":"2026-10-11"},"ai_involvement":{"basis":"The issue states that the Cline agent, in Act mode, constructed and ran the cleanup command whose mangled quoting sent rmdir /s /q against the drive root, and attributes the deletion of the drive's contents to that command; the author adopted the account by filing it and said the agent wrote the text on their behalf. A commenter's sandbox reproduction supports the quoting mechanism but not the author's loss. A second contributor, writing for the project, wrote: \"It looks like the model wrote `\\\"` when it should not have.\" In a later comment the author took responsibility (\"the mistake is entirely mine\") and named the model as deepseek/deepseek-v4-flash, without withdrawing the account of the agent's command.","status":"reported"},"person_relations":["acted_on_behalf"]},"name":"GitHub issue by a Cline user: a cleanup command the agent built ran against a Windows data drive's root, deleting about 1.5 TB of personal files, user says","summary":"In a GitHub issue filed on 6 October 2026 in the Cline repository, a user reports that a temp-folder cleanup command built by the Cline coding agent in Act mode on Windows was mangled by nested quoting and ran a recursive delete against the root of the G: data drive instead of the intended subfolder. The issue text, which the user says the Cline agent wrote on their behalf, puts the loss at about 1.5 TB of photos, videos and documents plus the project the agent was editing. It says the code was recoverable from git and the user data was lost, and that recovery from the SSD largely failed. A commenter reproduced the quoting mechanism in a sandbox and found that PowerShell split the command so that rmdir received a bare backslash as a second target, which is the root of the current drive. One contributor proposed an Act-mode guard. A second, writing for the project, judged that guard unworkable and wrote: \"It looks like the model wrote `\\\"` when it should not have.\" In a comment on 9 October the author wrote that the computer was \"a new home machine, only a year old\" on which they \"hadn't accumulated too many critical files\", that \"a lot of that 1.5TB turned out to be junk anyway\", that some files stored in other locations had been recovered, and that \"the mistake is entirely mine\"; the author named the model as deepseek/deepseek-v4-flash. The loss itself rests on the user's account.","incidentKind":"single_event","incidentDatePrecision":"unknown","exposurePattern":"single_interaction","reportedDate":"2026-10-06","aiSystem":"Cline coding agent, VS Code extension version 4.1.22, using its run_commands tool in Act mode to invoke cmd /c through PowerShell on Windows, per the issue; in a later comment the author named the model as deepseek/deepseek-v4-flash","aiProduct":"Cline","aiCompany":"Cline","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["property_loss","other_material_harm"],"harmOutcomeSummary":"The user reports that a recursive delete built by the Cline agent for a temp-folder cleanup ran against the root of their Windows data drive and deleted about 1.5 TB of photos, videos and documents plus the project being edited, with the code recoverable from git. The filing said the user data was lost. In a later comment the author wrote that a lot of the 1.5 TB turned out to be junk, that few critical files had accumulated on the machine and that some files stored elsewhere were recovered (agent-written filing adopted by the user and the user's later comment, uncorroborated).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person: the account's author. Exact 1.","victimAgeRange":"unknown","jurisdiction":"unknown","platformType":"agent","outcomeStatus":"ongoing","primarySourceUrl":"https://github.com/cline/cline/issues/14864","primarySourceLabel":"GitHub issue cline/cline #14864, 6 October 2026: mangled quoting led to rmdir /s /q running against a drive root, mass deletion of user data","firstPublishedAt":"2026-10-07T03:20:29.209252+00:00","updatedAt":"2026-10-11T07:43:49.254816+00:00","scopeVersion":"facts-v3","tags":["first-person","github-issue","cline","ai-agent","coding-agent","data-loss","file-deletion","windows","drive-root","powershell-quoting","acted-on-behalf"]},{"id":"2026-moscow-ai-generated-herbalist-advice-hospitalisation-reported","caseFacts":{"claims":[{"id":"hospital","status":"reported","evidence":[{"locator":"'На её страничке публиковались разные видеорецепты для «здоровья».'; 'Женщина повелась на тот, что обещал почистить кишечник.'; 'Но снадобье оказалось смертельно опасным.'; 'Около трёх ночи у женщины начались дикие боли в животе'; 'Позвонила родным, те вызвали скорую. Пенсионерку экстренно увезли в больницу, где оказали первую помощь'","relation":"supports","source_id":"s0"}],"assertion":"SHOT reports that a Moscow woman was hospitalised after following a health recipe from a social-media herbalist persona.","causal_attribution":"SHOT reports the sequence and connection to the advice. No clinical record establishing the medical cause was inspected."},{"id":"persona","status":"reported","evidence":[{"locator":"'Женщина думала, что блогерша — реальная целительница'; 'подписалась в соцсетях на нейросетевую «травницу»'; 'по рецепту ИИ-аватара'; 'объяснили, что такое нейросети'","relation":"supports","source_id":"s0"}],"assertion":"SHOT describes the herbalist as a neural-network persona and an AI avatar, says the woman believed the presenter was a real healer, and implies, without detail, that hospital staff told her the presenter was AI-generated.","causal_attribution":"This is SHOT's attribution. The post's only indication of a basis is its closing remark that hospital staff explained neural networks to her, given without detail; it names no account or tool. The record does not infer that AI wrote the recipe or that the hospital examined the persona."},{"id":"recovery","status":"reported","evidence":[{"locator":"'Сейчас с пациенткой все хорошо, врачи оказали ей помощь и провели лечение.'","relation":"supports","source_id":"s2"}],"assertion":"Glavny.tv reports that the patient was doing well after receiving treatment.","causal_attribution":"Recovery is reported within the same SHOT-derived account, without an independently inspected clinical source."}],"effects":[{"label":"SHOT reports that a Moscow woman was hospitalised after following advice from a social-media herbalist persona.","claim_id":"hospital","direction":"negative"}],"sources":[{"id":"s0","url":"https://t.me/shot_shot/100748","kind":"news_channel_post","access":"read","language":"ru","translation_note":"Original Russian Telegram post read through its public embed and channel preview on 6 October 2026. English paraphrases are an AI translation. HTML datetime is 2026-10-05T07:42:51+00:00. The post names no account and gives no detail of its AI identification beyond implying that hospital staff explained it. Re-read through the public embed on 11 October 2026 to take verbatim locators. No original persona media was available in the retrieved post.","independence_group":"shot"},{"id":"s1","url":"https://life.ru/p/moskvichku-gospitalizirovali-s-krovavoy-rvotoy-posle-otvara-ot-ii-znaharki","kind":"news_report","access":"read","language":"ru","translation_note":"Russian Life.ru article body inspected; English paraphrases are an AI translation. Relays SHOT. Its more explicit statement that hospital staff told her the videos' author was a neural-network character elaborates the SHOT post's brief implication and is not used here. The ChatGPT illustration caption concerns the outlet’s illustration, not the incident tool.","independence_group":"shot"},{"id":"s2","url":"https://glavny.tv/last-news/society-news/shot-moskvichku-gospitalizirovali-s-krovavoy-rvotoy-posle-retseptov-ot-ii/","kind":"news_report","access":"read","language":"ru","translation_note":"Russian Glavny.tv article body inspected; English paraphrases are an AI translation. Relays SHOT, so this is not independent corroboration. Its recovery statement is attributed to this relay. Its more specific hospital identification of the persona is not used. The recovery passage was checked on 11 October 2026 against a retained copy of the article body because the live page did not load in full.","independence_group":"shot"}],"version":1,"ai_roles":["others_use"],"contexts":["health"],"unknowns":["Exact event date.","Independent confirmation of the reported event and medical cause of the symptoms.","The original persona account, video, creator and production tool, and any basis for SHOT’s AI identification beyond its undetailed implication that hospital staff explained it.","Whether the presenter was in fact generated, and who wrote the advice."],"geography":{"basis":"The reports place the event in Moscow. No separate nationality or residence-country inference is made.","court_countries":[],"event_countries":["RU"],"affected_person_countries":[]},"publication":{"basis":"Concrete reported hospitalisation linked by SHOT to advice from a presenter it describes as an AI avatar. Published as an unverified attributed account, with the thinly stated basis for AI identification (an undetailed implication that hospital staff explained it) and unknown recipe authorship explicit. The original describes the person’s encounter, belief and action; the record does not claim that the hospital examined the persona, and no independent corroboration is claimed.","reviewed_on":"2026-10-11"},"ai_involvement":{"basis":"SHOT describes a social-media presenter as an AI avatar, says the woman believed the herbalist was a real person and connects following its recipe to subsequent hospital treatment. This is an explicit reported generated-persona pathway. The post implies, without detail, that hospital staff told her the presenter was AI-generated; it names no account or tool, and no original video or account was inspected. The reported contribution is reliance on the presenter. AI authorship of the recipe, production provenance and medical causation are unconfirmed.","status":"reported"},"person_relations":["communicated_with"]},"name":"SHOT reports Moscow woman hospitalised after following advice from a persona it describes as AI-generated","summary":"SHOT reports that an older Moscow woman followed a health recipe from a social-media herbalist whom she believed was a real person. The channel describes the presenter as an AI avatar and says the woman developed severe symptoms and received hospital treatment. Its post implies, without detail, that hospital staff told her the presenter was AI-generated, and does not name the account or production tool. Glavny.tv, relaying SHOT, reports that she recovered. This is one unverified reporting chain. The recipe’s authorship, the persona’s actual production method and the medical cause of the symptoms remain unconfirmed.","incidentKind":"single_event","incidentDatePrecision":"unknown","exposurePattern":"unknown","reportedDate":"2026-10-05","aiSystem":"A herbalist persona in social-media health videos that SHOT describes as an AI avatar. The production tool and basis for that identification are unconfirmed.","aiProduct":"Unidentified video tool","severity":"medium","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["hospitalization"],"harmOutcomeSummary":"SHOT reports hospital treatment after the woman followed the advice. Medical causation is unconfirmed. Glavny.tv’s relay reports recovery.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"exact","affectedCountEvidence":"SHOT describes one woman who received hospital treatment. She is counted as a viewer reportedly harmed by someone else’s use of a persona described as generated. No wider audience is counted.","victimAgeRange":"elderly","jurisdiction":"RU","primarySourceUrl":"https://t.me/shot_shot/100748","primarySourceLabel":"SHOT, 5 October 2026: reported hospitalisation after advice from an alleged AI herbalist","firstPublishedAt":"2026-10-06T04:48:56.037044+00:00","updatedAt":"2026-10-11T07:44:06.348113+00:00","scopeVersion":"facts-v3","tags":["synthetic-persona","health-advice","hospitalisation","single-reporting-chain"]},{"id":"2026-claude-code-sub-agent-recursive-delete-resolved-to-windows-drive-root-dev-folder-deleted-first-person","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'A subagent (spawned via the Agent tool) ran'; 'intending to delete a stray directory literally named'; 'MSYS path translation resolved the bare backslash to the'","relation":"supports","source_id":"s1"}],"assertion":"The author reports that a Claude Code sub-agent ran a recursive delete intended for a stray directory in the repository, and that Git Bash path translation resolved its target to the root of the current drive.","causal_attribution":"Author attributes the command to the sub-agent and the error to the model."},{"id":"c2","status":"reported","evidence":[{"locator":"'in alphabetical order for ~7 minutes before being killed manually'; '(multiple projects, some with no remote backup) was deleted'","relation":"supports","source_id":"s1"}],"assertion":"The author reports that the command deleted drive contents in alphabetical order for about seven minutes and destroyed a development folder holding several projects, some with no remote backup.","causal_attribution":"Author's account."},{"id":"c3","status":"reported","evidence":[{"locator":"'Recovery succeeded via a same-day Volume Shadow Copy plus GitHub remotes; one directory created after the snapshot was permanently lost'","relation":"supports","source_id":"s1"}],"assertion":"The author reports that most data was recovered from a same-day shadow copy and GitHub remotes and that one directory created after the snapshot was permanently lost.","causal_attribution":"Author's account."},{"id":"c4","status":"reported","evidence":[{"locator":"'When the agent realized the problem and called TaskStop on the background task, the tool reported success, but the underlying'; 'kept deleting for roughly 5 more minutes until it was killed manually by PID'","relation":"supports","source_id":"s1"}],"assertion":"The author reports that when the agent called its stop tool, the tool reported success while the delete process kept running for about five more minutes until it was killed manually.","causal_attribution":"Author's account of the harness behaviour."},{"id":"c5","status":"reported","evidence":[{"locator":"'Model: claude-fable-5 (main session and subagent)'; 'Claude Code CLI on Windows 11 Home'","relation":"supports","source_id":"s1"}],"assertion":"The issue records the model claude-fable-5 for the main session and the sub-agent, running the Claude Code CLI on Windows 11 Home.","causal_attribution":"Not applicable."}],"effects":[{"label":"development folder of several projects deleted from the drive root down (author's account)","claim_id":"c2","direction":"negative"},{"label":"one directory permanently lost after partial recovery from a shadow copy and remotes (author's account)","claim_id":"c3","direction":"negative"}],"sources":[{"id":"s1","url":"https://github.com/anthropics/claude-code/issues/92593","kind":"first_person_account","access":"read","language":"en","translation_note":"Read in English on 2026-10-06: full issue body retrieved through the GitHub API; the issue had no comments. The author handle is not recorded.","independence_group":"github-claude-code-92593-author"}],"version":1,"ai_roles":["own_use"],"contexts":["work"],"unknowns":["The date of the deletion; the issue was filed on 7 September 2026 and mentions a same-day shadow copy but gives no event date.","What the permanently lost directory contained.","Whether Anthropic has confirmed or responded to the report.","Where the author lives."],"geography":{"basis":"The issue does not say where the author was or lives; no country is recorded.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Published under the charter's public first-person rule as a concrete account of an AI coding agent's own recursive delete destroying a user's project folder with a permanent partial loss, described with attribution and without corroboration. The author's handle is not recorded.","reviewed_on":"2026-10-06"},"ai_involvement":{"basis":"The author states that a Claude Code sub-agent chose and ran the recursive delete aimed at a stray folder, that it resolved to the drive root and deleted the development folder, and that the delete kept running after the agent's stop call reported success; the author describes the agent's error as the model's.","status":"reported"},"person_relations":["acted_on_behalf"]},"name":"First-person GitHub issue: Claude Code user reports a sub-agent's recursive delete hit the Windows drive root and destroyed a development folder","summary":"In a public GitHub issue filed on 7 September 2026, a Claude Code user on Windows reports that a sub-agent, intending to delete a stray directory inside the repository, ran a recursive delete that Git Bash path translation resolved to the root of the current drive. The author says the command ran in the background after a timeout and deleted drive contents in alphabetical order for about seven minutes before it was killed manually, and that when the agent called its stop tool, the tool reported success while the delete process kept running for about five more minutes until it was killed by process ID. Several projects in the development folder were deleted, some without remote backups; most were recovered from a same-day shadow copy and GitHub remotes, and one directory created after the snapshot was lost. The account is the author's own and is uncorroborated.","incidentKind":"single_event","incidentDatePrecision":"unknown","exposurePattern":"single_interaction","reportedDate":"2026-09-07","aiSystem":"Claude Code CLI on Windows 11 Home, a sub-agent spawned through the Agent tool running claude-fable-5 and using the Bash tool through Git Bash, per the issue","aiProduct":"Claude Code (reported)","aiCompany":"Anthropic","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["property_loss","other_material_harm"],"harmOutcomeSummary":"The author reports that a Claude Code sub-agent's recursive delete, aimed at a stray folder, resolved to the Windows drive root and deleted their development folder of several projects; most was recovered from a shadow copy and remotes, but one directory was permanently lost (first-person account, uncorroborated).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person: the issue's author. Exact 1.","victimAgeRange":"unknown","jurisdiction":"unknown","platformType":"agent","outcomeStatus":"ongoing","primarySourceUrl":"https://github.com/anthropics/claude-code/issues/92593","primarySourceLabel":"GitHub issue anthropics/claude-code #92593, 7 September 2026: runaway sub-agent recursive delete on Windows kept running after TaskStop","firstPublishedAt":"2026-10-06T03:11:06.502004+00:00","updatedAt":"2026-10-11T07:32:44.952992+00:00","scopeVersion":"facts-v3","tags":["first-person","github-issue","claude-code","anthropic","ai-agent","sub-agent","data-loss","file-deletion","windows","drive-root","acted-on-behalf"]},{"id":"2026-claude-code-sub-agent-auto-mode-recursive-delete-wiped-windows-drive-root-about-125-gb-first-person","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'a background subagent (auto mode, Claude Code desktop app) passed a bash script to MSYS2 inside a PowerShell double-quoted string'; 'meant to delete a temporary folder'; 'which MSYS2 treats as the root of the current drive'; 'Auto mode approved the command'","relation":"supports","source_id":"s1"}],"assertion":"The author reports that a background Claude Code sub-agent in auto mode passed a bash script inside a PowerShell string whose last step was meant to delete a temporary folder, and that bash instead received a recursive delete of the drive root, which auto mode approved.","causal_attribution":"Author attributes the script and the command to the sub-agent."},{"id":"c2","status":"reported","evidence":[{"locator":"'It deleted everything the user could delete from C:\\ in alphabetical order, until stopped about two minutes later'; 'about 125 GB of personal and project folders at the drive root'; 'the whole working project'; 'files inside several installed programs (Adobe, Epic Games/Unreal, AMD and others)'","relation":"supports","source_id":"s1"}],"assertion":"The author reports that the command deleted files from C: in alphabetical order for about two minutes, including about 125 GB of personal and project folders, the whole working project and files inside several installed programs.","causal_attribution":"Author's account."},{"id":"c3","status":"reported","evidence":[{"locator":"'Nothing went to the Recycle Bin'; 'Recovery was only possible from a Windows shadow copy taken nine hours earlier'","relation":"supports","source_id":"s1"}],"assertion":"The author reports that nothing went to the Recycle Bin and that recovery was only possible from a Windows shadow copy taken nine hours earlier.","causal_attribution":"Author's account."},{"id":"c4","status":"reported","evidence":[{"locator":"'CLAUDE MODEL Opus 5.5 (a general-purpose subagent in the background)'; 'Windows 11 Pro 10.0.26200'; '2.9939.2'","relation":"supports","source_id":"s1"}],"assertion":"The issue records the Claude Code desktop app version 2.9939.2 and the model Opus 5.5 running as a general-purpose sub-agent in the background on Windows 11 Pro.","causal_attribution":"Not applicable."}],"effects":[{"label":"about 125 GB of personal and project folders, the working project and installed-program files deleted (author's account)","claim_id":"c2","direction":"negative"},{"label":"recovery possible only from a shadow copy taken nine hours earlier (author's account)","claim_id":"c3","direction":"negative"}],"sources":[{"id":"s1","url":"https://github.com/anthropics/claude-code/issues/97660","kind":"first_person_account","access":"read","language":"en","translation_note":"Read in English on 2026-10-06: full issue body retrieved through the GitHub API; the issue had no comments. The transcripts and output log offered on request were not retrieved. The author handle is not recorded.","independence_group":"github-claude-code-97660-author"}],"version":1,"ai_roles":["own_use"],"contexts":["work"],"unknowns":["The date of the deletion; the issue was filed on 27 September 2026 and gives no event date.","How much of the deleted data and installed software was restored from the shadow copy, and what changes after it were lost.","Whether Anthropic has confirmed or responded to the report.","Where the author lives."],"geography":{"basis":"The issue does not say where the author was or lives; no country is recorded.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Published under the charter's public first-person rule as a concrete account of an AI coding agent's own cleanup command deleting a user's files and programs after automatic approval, described with attribution and without corroboration. The author's handle is not recorded.","reviewed_on":"2026-10-06"},"ai_involvement":{"basis":"The author states that a Claude Code background sub-agent wrote and ran the PowerShell-wrapped bash script whose cleanup step became a recursive delete of the drive root, that auto mode approved it, and attributes the deletions to it, quoting the command output. The transcripts were not examined.","status":"reported"},"person_relations":["acted_on_behalf"]},"name":"First-person GitHub issue: Claude Code user reports an auto-mode sub-agent turned a temp-folder cleanup into a delete of the Windows drive root (about 125 GB)","summary":"In a public GitHub issue filed on 27 September 2026, a Claude Code desktop app user on Windows reports that a background sub-agent running in auto mode passed a bash script inside a PowerShell string, meaning to delete a temporary folder. Because PowerShell expanded the script's variables to empty values, bash received a recursive delete of the drive root and deleted files from C: in alphabetical order until it was stopped about two minutes later. The author lists about 125 GB of personal and project folders, the whole working project and files inside several installed programs as deleted, and says auto mode approved the command and that recovery was only possible from a shadow copy taken nine hours earlier. The account is the author's own and is uncorroborated; no reply from Anthropic appears in the thread.","incidentKind":"single_event","incidentDatePrecision":"unknown","exposurePattern":"single_interaction","reportedDate":"2026-09-27","aiSystem":"Claude Code desktop app 2.9939.2 (Code tab), a general-purpose background sub-agent running Opus 5.5 in auto mode on Windows 11 Pro, using the PowerShell tool to call MSYS2 bash, per the issue","aiProduct":"Claude Code (reported)","aiCompany":"Anthropic","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["property_loss","other_material_harm"],"harmOutcomeSummary":"The author reports that a Claude Code background sub-agent, approved by auto mode, ran a recursive delete that wiped about 125 GB of personal and project folders, their working project and parts of installed programs from a Windows drive, recoverable only from a nine-hour-old shadow copy (first-person account, uncorroborated).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person: the issue's author. Exact 1.","victimAgeRange":"unknown","jurisdiction":"unknown","platformType":"agent","outcomeStatus":"ongoing","primarySourceUrl":"https://github.com/anthropics/claude-code/issues/97660","primarySourceLabel":"GitHub issue anthropics/claude-code #97660, 27 September 2026: sub-agent recursive delete via PowerShell and MSYS2 wiped the C: drive top-down","firstPublishedAt":"2026-10-06T03:11:02.761476+00:00","updatedAt":"2026-10-11T07:32:36.674197+00:00","scopeVersion":"facts-v3","tags":["first-person","github-issue","claude-code","anthropic","ai-agent","sub-agent","auto-mode","data-loss","file-deletion","windows","drive-root","acted-on-behalf"]},{"id":"2025-indore-reported-relative-voice-clone-transfer-loss","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"Article body: official's voice-generation and claimed visa account.","relation":"supports","source_id":"s1"}],"assertion":"The named police official attributes the impersonated relative's voice to AI and describes the visa emergency demand.","causal_attribution":"The inspected reporting describes this account. Claims remain attributed and causation is alleged; multiple reports of the same victim or police/court account are one independence group."},{"id":"c2","status":"reported","evidence":[{"locator":"Article body: exact transferred total and next-day discovery.","relation":"supports","source_id":"s1"}],"assertion":"Police say the local resident transferred Rs 1.83 lakh in multiple transactions and discovered the deception after contacting the real relative.","causal_attribution":"The inspected reporting describes this account. Claims remain attributed and causation is alleged; multiple reports of the same victim or police/court account are one independence group."},{"id":"c3","status":"reported","evidence":[{"locator":"Article body: bank coordination and recovery status.","relation":"supports","source_id":"s1"}],"assertion":"The official says the cyber cell worked with banks to freeze accounts and seek recovery.","causal_attribution":"The inspected reporting describes this account. Claims remain attributed and causation is alleged; multiple reports of the same victim or police/court account are one independence group."}],"effects":[{"label":"Police-reported loss of Rs 1.83 lakh through several transfers","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://timesofindia.indiatimes.com/city/indore/indore-resident-loses-rs-1-83-lakh-to-ai-generated-voice-fraud/articleshow/125598857.cms","kind":"journalistic","access":"read","language":"en","translation_note":"","independence_group":"original-account-aiid-1566"}],"version":1,"ai_roles":["others_use"],"contexts":["finance","relationships"],"unknowns":["The first event date, voice tool and scammer identity are unknown.","The final recovery and police outcome were not inspected."],"geography":{"basis":"The victim is described as a local Indore resident and the investigation is in Indore, India. The real relative's location abroad is not a separate harm setting.","court_countries":[],"event_countries":["IN"],"affected_person_countries":["IN"]},"publication":{"basis":"An inspected source describes a concrete person-level adverse experience connected to the specified AI use. Statements remain attributed, private identities are minimized, and unknown dates, counts and technical details are preserved.","reviewed_on":"2026-09-30"},"ai_involvement":{"basis":"The named officer expressly attributes this caller's voice to AI. No audio or forensic record was inspected. The later generic spoof-call example is a different event.","status":"reported"},"person_relations":["communicated_with"]},"name":"Indore police report Rs 1.83 lakh loss after a voice impersonation of a relative","summary":"Indore police told The Times of India that a local resident transferred Rs 1.83 lakh after callers used a purported AI-generated voice to impersonate his brother-in-law abroad. The callers claimed an expired visa would lead to imprisonment or job loss unless fees were paid. The victim discovered the fraud after speaking to the real relative the next day. Police said they coordinated account freezes and were working on recovery. The first call date and recovery outcome are unknown.","incidentKind":"single_event","incidentDatePrecision":"unknown","exposurePattern":"unknown","reportedDate":"2025-11-27","aiSystem":"Reported AI-generated relative voice impersonation","aiProduct":"Unidentified voice-cloning tool","aiCompany":"Unknown","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["financial_loss"],"harmOutcomeSummary":"Police-reported loss of Rs 1.83 lakh through several transfers","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"documented_minimum","affectedCountEvidence":"One local resident transferred funds. The impersonated relative was not actually imprisoned or deprived of a job and is not counted as harmed.","victimAgeRange":"unknown","platformType":"other","primarySourceUrl":"https://timesofindia.indiatimes.com/city/indore/indore-resident-loses-rs-1-83-lakh-to-ai-generated-voice-fraud/articleshow/125598857.cms","primarySourceLabel":"The Times of India, 27 November 2025, named police official account","firstPublishedAt":"2026-09-30T01:11:39.324544+00:00","updatedAt":"2026-09-30T01:57:54.662513+00:00","scopeVersion":"facts-v3","tags":[]},{"id":"2026-programmer-reports-ai-workload-pressure","caseFacts":{"claims":[{"id":"2026-programmer-reports-ai-workload-pressure-claim-1","status":"reported","evidence":[{"locator":"Original post, first and second paragraphs.","relation":"supports","source_id":"2026-programmer-reports-ai-workload-pressure-source-1"}],"assertion":"Author reports forgetting familiar programming skills during frequent AI use.","causal_attribution":"Reported attribution remains unestablished independently."},{"id":"2026-programmer-reports-ai-workload-pressure-claim-2","status":"reported","evidence":[{"locator":"Original post closing paragraph and author reply to the question about work performance.","relation":"supports","source_id":"2026-programmer-reports-ai-workload-pressure-source-1"}],"assertion":"Author reports increased sprint workload, feeling overwhelmed, and a reprimand after a code change failed.","causal_attribution":"Reported attribution remains unestablished independently."},{"id":"2026-programmer-reports-ai-workload-pressure-claim-3","status":"reported","evidence":[{"locator":"Original post closing paragraphs and author follow-up about performance and personal projects.","relation":"supports","source_id":"2026-programmer-reports-ai-workload-pressure-source-1"}],"assertion":"Author reports faster delivery with AI and renewed enjoyment after reducing use.","causal_attribution":"Reported attribution remains unestablished independently."}],"effects":[{"label":"reported_skill_difficulty","claim_id":"2026-programmer-reports-ai-workload-pressure-claim-1","direction":"negative"},{"label":"workload_and_professional_consequences","claim_id":"2026-programmer-reports-ai-workload-pressure-claim-2","direction":"negative"},{"label":"reported_utility_and_recovery","claim_id":"2026-programmer-reports-ai-workload-pressure-claim-3","direction":"positive"}],"sources":[{"id":"2026-programmer-reports-ai-workload-pressure-source-1","url":"https://www.reddit.com/r/chileIT/comments/1v4erbp/la_ia_me_reseteo_el_cerebro/","kind":"forum_post","access":"read","language":"es","translation_note":"Model read the original language. No independent bilingual human review.","independence_group":"2026-programmer-reports-ai-workload-pressure-account"}],"version":1,"ai_roles":["own_use","institutional_use"],"contexts":["work"],"unknowns":["No independent assessment of skills, workload or causal contribution.","No code, employer statement or clinical evidence inspected.","Exact event and publication dates are unknown.","Self-described health conditions are not adopted as diagnoses."],"geography":{"basis":"Location unstated. Subreddit and language do not establish country.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"A concrete adverse account with an inspected source, explicit attribution and uncertainty. Duplicate and identity review completed.","reviewed_on":"2026-09-15"},"ai_involvement":{"basis":"Attributed in the source; no independent technical verification.","status":"reported"},"person_relations":["communicated_with"]},"name":"Developer reports workload pressure during AI-assisted programming","summary":"A Spanish-language first-person account describes workplace and skill difficulties during frequent AI use, alongside perceived benefits and a subsequent reduction in use. The account remains uncorroborated.","incidentKind":"ongoing_experience","incidentDatePrecision":"unknown","exposurePattern":"repeated_interactions","aiSystem":"ChatGPT, Claude and DeepSeek","aiProduct":"ChatGPT, Claude and DeepSeek","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["professional_harm","psychological_distress"],"harmOutcomeSummary":"The author reports workload pressure, skill difficulty and a reprimand.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":0,"affectedCountStatus":"unquantified","affectedCountEvidence":"This anonymous account is not used to derive a reliable person count.","victimAgeRange":"unknown","outcomeStatus":"unknown","primarySourceUrl":"https://www.reddit.com/r/chileIT/comments/1v4erbp/la_ia_me_reseteo_el_cerebro/","primarySourceLabel":"First-person forum account in Spanish","firstPublishedAt":"2026-09-15T03:07:29.235224+00:00","updatedAt":"2026-09-30T01:17:49.747208+00:00","scopeVersion":"facts-v3","tags":["work","first-person-account"]}]}