{"meta":{"exportedAt":"2026-10-12T08:15:40.114Z","formatVersion":2,"selection":{"q":"spokesperson","system":"","harm":"","context":"","country":"","role":"","relation":"contextual","evidence":"","year":"2025","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":2,"coverage":{"cases":2,"countries":2,"languages":2,"unknownLocation":0,"locationPending":0,"unknownLanguage":0,"unknownDate":0,"lawsuits":0,"regulatory":0,"minors":1,"coreRelations":0,"contextualRelations":2,"mixedRelations":0,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2025-eindhoven-municipal-staff-uploaded-residents-youth-care-and-social-support-files-to-public-ai-websites","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'Uit die steekproef is aan het licht gekomen dat er bestanden met persoonlijke gegevens naar openbare AI-websites zoals ChatGPT zijn gestuurd.'; 'Denk aan Jeugdwetdocumenten, interne verslagen en cv'; 'De steekproef ging over de periode van 23 september tot 23 oktober'","relation":"supports","source_id":"s1"},{"locator":"'In een steekproef over de periode van 23 september tot 23 oktober 2025 constateerde de gemeente dat verschillende soorten bestanden met persoonsgegevens waren geüpload naar openbare AI-websites.'","relation":"supports","source_id":"s3"}],"assertion":"According to the council letter as reported, a sample of staff data traffic from 23 September to 23 October 2025 found that files containing personal data of residents and employees had been uploaded to public AI websites such as ChatGPT, including youth-care documents, internal reports and CVs, mostly from care and support departments.","causal_attribution":"The municipality's own account in its council letter, relayed by two outlets that share that origin."},{"id":"c2","status":"reported","evidence":[{"locator":"'documenten uit de Jeugdwet met daarin informatie over de mentale en fysieke gezondheid van minderjarige kinderen'; 'Maar ook documenten van de Wet Maatschappelijke Ondersteuning (WMO) zijn ingevoerd.'; 'van sollicitanten en reflectieverslagen van medewerkers met daarin informatie over werkprestaties zijn in de Ai-tool terechtgekomen.'","relation":"supports","source_id":"s2"}],"assertion":"According to Omroep Brabant's account of the advisory firm's findings, the youth-care documents contained information about the mental and physical health of minor children, and social-support (WMO) documents, applicants' CVs and employees' reflection reports were also entered into the AI tool.","causal_attribution":"The advisory firm's findings as reported by one outlet; the report itself was not read."},{"id":"c3","status":"reported","evidence":[{"locator":"'Het datalek is op 23 oktober gemeld bij de Autoriteit Persoonsgegevens.'; 'De gemeente heeft OpenAI (het bedrijf achter ChatGPT) verzocht om de bestanden die vanuit Eindhoven zijn geüpload te verwijderen.'","relation":"supports","source_id":"s1"},{"locator":"'Sinds 23 oktober kunnen medewerkers alleen nog gebruikmaken van Copilot binnen de beveiligde gemeente-omgeving.'","relation":"supports","source_id":"s3"}],"assertion":"The municipality reported the breach to the Dutch Data Protection Authority on 23 October, stopped staff using public AI websites (allowing only Copilot in its secured environment), and asked OpenAI to delete the uploaded files.","causal_attribution":"The municipality's statements of its response, relayed by two outlets sharing the council-letter origin."},{"id":"c4","status":"reported","evidence":[{"locator":"'Daarom is het volgens het college ook niet mogelijk om mensen van wie gegevens gelekt zijn te informeren.'; 'Individuele gegevens die zijn geüpload in een AI-tool kunnen niet eenvoudig door derden uit de tool worden gehaald en worden misbruikt.'","relation":"supports","source_id":"s1"},{"locator":"'De gemeente Eindhoven heeft van OpenAi nog geen reactie gehad op hun verzoek, zo liet een woordvoerder vrijdag weten.'","relation":"supports","source_id":"s2"},{"locator":"'De totale omvang van de gedeelde gegevens is niet vast te stellen, omdat deze gegevens maximaal 30 dagen beschikbaar zijn.'","relation":"supports","source_id":"s3"}],"assertion":"The council says the scale of the uploads cannot be established because the data was kept for only 30 days, that it therefore cannot inform those affected, and that individual uploaded data cannot easily be extracted by third parties though the risk cannot be fully excluded; a spokesperson said OpenAI had not yet replied.","causal_attribution":"The council's and a spokesperson's statements about scope and risk."}],"effects":[{"label":"residents' youth-care and social-support files and job applicants' CVs uploaded to public AI websites without their knowledge (council letter, as reported)","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.omroepbrabant.nl/nieuws/6001041/datalek-gemeente-eindhoven-deelt-persoonsgegevens-met-openbare-ai-websites","kind":"news_report","access":"read","language":"nl","translation_note":"Read in Dutch on 2026-10-12; quoted passages were translated into English by the research agent (an AI), not by a human translator. Omroep Brabant's report of the council information letter.","independence_group":"eindhoven-council-letter"},{"id":"s2","url":"https://www.omroepbrabant.nl/nieuws/6001062/datalek-eindhoven-met-kwetsbare-burgers-verwijderverzoek-is-kansloos","kind":"news_report","access":"read","language":"nl","translation_note":"Read in Dutch on 2026-10-12; quoted passages were translated into English by the research agent (an AI), not by a human translator. Omroep Brabant's follow-up citing the advisory firm's findings and a municipal spokesperson; the firm's report itself was not read.","independence_group":"omroep-brabant-hooghiemstra-findings"},{"id":"s3","url":"https://www.binnenlandsbestuur.nl/digitaal/gemeente-eindhoven-blokkeert-chatgpt-na-datalek","kind":"news_report","access":"read","language":"nl","translation_note":"Read in Dutch on 2026-10-12; quoted passages were translated into English by the research agent (an AI), not by a human translator. Binnenlands Bestuur's report of the same council letter, so it shares the first source's group.","independence_group":"eindhoven-council-letter"}],"version":1,"ai_roles":["others_use"],"contexts":["public_services","health","work","privacy"],"unknowns":["How many residents, children, applicants and employees had data uploaded.","Whether uploads happened before or after the 23 September to 23 October 2025 sample window.","Which AI websites other than ChatGPT received files, and which account types staff used.","Whether OpenAI deleted the files, and whether any data was retained or used for training.","Whether the Dutch Data Protection Authority has taken a decision on the notification."],"geography":{"basis":"The uploads were found in the data traffic of the municipality of Eindhoven's staff, and the files concern residents and employees of that Dutch municipality. No court is involved.","court_countries":[],"event_countries":["NL"],"affected_person_countries":["NL"]},"publication":{"basis":"Published under the 2026-10-06 private-information ruling: the municipality's council letter, as reported by two outlets, describes staff actually uploading files with residents' youth-care and social-support data and applicants' CVs to public AI websites such as ChatGPT, without the knowledge of the people concerned. The scale is unknown and is recorded as such; the council's view that misuse risk is limited is recorded with it.","reviewed_on":"2026-10-12"},"ai_involvement":{"basis":"The municipality's council letter, as reported by two outlets, states that a sample of staff data traffic found files with residents' and employees' personal data, including youth-care documents, had been sent to public AI websites such as ChatGPT, and the municipality asked OpenAI to delete the uploaded files. The privacy harm is that transfer of residents' and employees' records into AI services without their knowledge. The sources report the uploads; they report no output about the people concerned, and whether the data was retained or used for training is not established (an expert's view on training is opinion).","status":"reported"},"person_relations":["received_personal_information"]},"name":"Eindhoven municipality says staff uploaded files with residents' youth-care and social-support data and applicants' CVs to public AI websites such as ChatGPT","summary":"The municipality of Eindhoven in the Netherlands told its council in an information letter shared on Thursday 18 December 2025 that a sample of staff data traffic from 23 September to 23 October 2025 showed files containing personal data of residents and employees had been sent to public AI websites such as ChatGPT, according to Omroep Brabant and Binnenlands Bestuur. The files included youth-care (Jeugdwet) documents, internal reports and CVs, mostly from departments that provide care and support to residents. According to Omroep Brabant's account of findings by the advisory firm Hooghiemstra & Partners, the youth-care documents held information about the mental and physical health of minor children, and social-support (WMO) documents and applicants' CVs were also entered. The municipality reported the breach to the Dutch Data Protection Authority on 23 October, blocked public AI websites and asked OpenAI to delete the files. The council says the scale cannot be determined because the data was kept for only 30 days, so it cannot inform those affected, and that the risk of misuse is limited but cannot be ruled out. A spokesperson said OpenAI had not yet replied.","incidentDate":"2025-09-23","incidentEndDate":"2025-10-23","incidentKind":"bounded_series","incidentDatePrecision":"day","exposurePattern":"repeated_interactions","reportedDate":"2025-12-18","aiSystem":"Public AI websites, which the municipality's council letter, as reported, names with ChatGPT as the example; the municipality asked OpenAI to delete the uploaded files","aiProduct":"ChatGPT (reported)","severity":"high","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"According to the municipality's council letter as reported, staff uploaded files containing personal data of residents and employees, including youth-care documents about children's mental and physical health and social-support files, to public AI websites such as ChatGPT; the council says it cannot determine the scale or inform those affected.","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":0,"otherPeopleHarmedMin":0,"affectedCountStatus":"unquantified","affectedCountEvidence":"The council says the scale cannot be established because the uploaded data was kept for only 30 days, and that it therefore cannot inform the people concerned. No count of residents, children, applicants or employees is given, so numeric zero placeholders are recorded. The staff who uploaded the files are not counted.","victimAgeRange":"unknown","jurisdiction":"NL","platformType":"other","outcomeStatus":"ongoing","primarySourceUrl":"https://www.omroepbrabant.nl/nieuws/6001041/datalek-gemeente-eindhoven-deelt-persoonsgegevens-met-openbare-ai-websites","primarySourceLabel":"Omroep Brabant, 19 December 2025: Eindhoven data breach, municipality shares personal data with public AI websites","firstPublishedAt":"2026-10-12T03:35:14.550754+00:00","updatedAt":"2026-10-12T03:35:14.550754+00:00","scopeVersion":"facts-v3","tags":["privacy","government","municipality","youth-care","health-data","chatgpt","unauthorised-ai-use","netherlands"]},{"id":"2025-baltimore-county-md-school-ai-gun-alert-chip-bag-student-searched","caseFacts":{"claims":[{"id":"c1","status":"corroborated","evidence":[{"locator":"after an AI-driven security system flagged the teen's empty bag of chips as a possible firearm","relation":"supports","source_id":"s1"},{"locator":"How did it come to be that we had police officers with guns drawn approaching a kid because of a bag of Doritos?","relation":"supports","source_id":"s3"},{"locator":"Omnilert AI Gun Detection System warned school leaders at Kenwood High School that a student had a gun.","relation":"supports","source_id":"s3"},{"locator":"Police officers responded to the school, searched the individual, and quickly confirmed that they were not in possession of any weapons.","relation":"supports","source_id":"s3"}],"assertion":"An AI gun detection system (Omnilert) alerted on a Kenwood High School student in Baltimore County, the object was a bag of chips and not a weapon, and police searched the student.","causal_attribution":"The reports connect the police response to the alert. The district and the vendor say the system operated as designed and that humans review alerts, so responsibility for the police response is contested between the system, the review steps and the responding staff."},{"id":"c2","status":"reported","evidence":[{"locator":"They made me get on my knees, put my hands behind my back, and cuffed me,","relation":"supports","source_id":"s1"},{"locator":"they had a gun pointed at me","relation":"supports","source_id":"s1"},{"locator":"handcuffed and searched","relation":"supports","source_id":"s2"}],"assertion":"The student reported being made to kneel, being handcuffed and searched, and having a gun pointed at them.","causal_attribution":"First-person account given to a local television station and relayed by the CNN wire and the Guardian (one chain). CNN also states the handcuffing in its own voice without naming a source other than the student interview. Police statements inspected confirm a search only."},{"id":"c3","status":"reported","evidence":[{"locator":"reviewed and canceled the gun detection alert after confirming there was no weapon","relation":"supports","source_id":"s1"},{"locator":"The principal didn't immediately realize the alert had been canceled","relation":"supports","source_id":"s1"},{"locator":"she reported the matter to Kenwood's school resource officer, who called local police for support","relation":"supports","source_id":"s1"},{"locator":"The Department of School Safety and Security reviewed and canceled the initial alert after confirming there was no weapon.","relation":"supports","source_id":"s3"}],"assertion":"The school district security department reviewed and canceled the alert after confirming there was no weapon. A district spokesperson said the principal did not immediately realize the alert had been canceled. The principal reported the matter to the school resource officer, who called police.","causal_attribution":"Account of the review sequence comes from the principal letter and district spokespeople. It attributes the police response to a communication gap after human review and does not exonerate the alert."},{"id":"c4","status":"reported","evidence":[{"locator":"Baltimore County officials say they want a review of the process that led to Monday's police response.","relation":"supports","source_id":"s1"},{"locator":"Baltimore County councilmembers are calling on school officials and police to review an A.I. gun detection system","relation":"supports","source_id":"s3"},{"locator":"Our counselors will provide direct support to the students who were involved in this incident","relation":"supports","source_id":"s2"}],"assertion":"County councilmembers called for a review of the AI system, and the school said counselors would support the students involved.","causal_attribution":"Institutional responses reported by the outlets. The outcome of any review is not established in the inspected sources."}],"effects":[{"label":"Student searched by armed police after a false AI weapon alert","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://abc7.com/post/student-handcuffed-doritos-bag-mistaken-gun-schools-ai-security-system-baltimore-county-maryland/18073796/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"wbal-relay"},{"id":"s2","url":"https://www.theguardian.com/us-news/2025/oct/24/baltimore-student-ai-gun-detection-system-doritos","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"wbal-relay"},{"id":"s3","url":"https://www.cbsnews.com/baltimore/news/false-alarm-gun-detection-kenwood-maryland-artificial-intelligence-review/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"wjz-cbs-baltimore"}],"version":1,"ai_roles":["institutional_use"],"contexts":["education","public_services"],"unknowns":["Event date is derived from the reports' \"Monday\" references relative to their publication dates (23 to 26 October 2025). The inspected bodies do not print the calendar date of the event.","The handcuffing and gun-pointing account is one first-person account relayed by two outlets, and CNN also states the handcuffing in its own voice without another named source. Police statements inspected confirm only a search after a report of a suspicious person with a weapon.","The outcome of the county review is not reported in the inspected sources.","The student's exact age is not stated. Sources call the student a teen and a child.","Vendor and district statements say the system worked as designed and that humans review alerts. Whether the review step or the alert caused the police dispatch is not settled."],"geography":{"basis":"The reports place the event at a high school in Baltimore County, Maryland, with the county police department and county council responding. Country is stated by place names in the inspected reports and is not inferred from outlet or vendor headquarters.","court_countries":[],"event_countries":["US"],"affected_person_countries":["US"]},"publication":{"basis":"Three news reports read in full (one via Internet Archive capture). The AI alert, the absence of a weapon and the search are separately reported. The handcuffing account is attributed to the student. The student's name is omitted because the student is a minor.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"Two separately reported chains say the AI alert flagged the object: the CNN wire with a vendor statement (its student account is WBAL-derived, as is the Guardian, a WBAL relay), and local CBS reporting with vendor and superintendent statements. Both also report human review steps between the alert and the police response.","status":"supported"},"person_relations":["made_claim_about"]},"name":"Baltimore County, Maryland: school AI gun alert on a bag of chips leads to police search of a student","summary":"On a Monday evening in October 2025 (20 October by the reports' weekday references) an AI gun detection system (Omnilert) used at Kenwood High School alerted on a student holding an empty bag of chips. Police responded and searched the student and found no weapon. The student told a local television station that officers made them kneel, handcuffed them and pointed a gun at them. The school district says its security department reviewed and canceled the alert after confirming there was no weapon, and a district spokesperson said the principal did not immediately realize the alert had been canceled. County councilmembers called for a review. No outcome of a review is established in the sources.","incidentDate":"2025-10-20","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"single_interaction","reportedDate":"2025-10-23","aiSystem":"Omnilert AI Gun Detection System (video analytics on school security cameras)","aiProduct":"Omnilert gun detection","aiCompany":"Omnilert","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["loss_of_liberty","psychological_distress"],"harmOutcomeSummary":"A student was searched by police after the AI alert and reported being handcuffed at gunpoint and fearing for their life (student account relayed by CNN and the Guardian). The school letter confirms a search and offers counseling.","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"documented_minimum","affectedCountEvidence":"One student who was searched. Other students who witnessed the event are mentioned in the school letter but are not counted without a reported harm to each.","victimAgeRange":"minor","platformType":"other","primarySourceUrl":"https://www.cbsnews.com/baltimore/news/false-alarm-gun-detection-kenwood-maryland-artificial-intelligence-review/","primarySourceLabel":"CBS Baltimore (WJZ): A.I. gun detection false alarm at school has Baltimore County leaders calling for review, 23 October 2025","firstPublishedAt":"2026-09-29T12:42:19.255568+00:00","updatedAt":"2026-09-30T01:16:56.487109+00:00","scopeVersion":"facts-v3","tags":["historical-2025"]}]}