{"meta":{"exportedAt":"2026-09-30T06:25:49.360Z","formatVersion":2,"selection":{"q":"tax","system":"","harm":"","context":"","country":"","role":"","relation":"unknown","evidence":"","year":"","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":3,"coverage":{"cases":3,"countries":3,"languages":2,"unknownLocation":0,"locationPending":0,"unknownLanguage":0,"unknownDate":0,"lawsuits":0,"regulatory":1,"minors":0,"coreRelations":0,"contextualRelations":0,"mixedRelations":0,"unknownRelations":3,"relationPending":0,"relationUnknown":3},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2026-chiang-mai-airport-woman-66-ai-generated-pilot-persona-facebook","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'เข้าช่วยเหลือคุณยายวัย 66 ปี ชาว จ.ลำปาง หลังเดินทางมาคนเดียวเพื่อรอพบชายชื่อ “ชัย” ซึ่งอ้างว่าเป็นนักบิน'","relation":"supports","source_id":"s1"},{"locator":"'จะมาพบคนชื่อชัย เป็นนักบินที่สนามบินเชียงใหม่'","relation":"supports","source_id":"s2"},{"locator":"'พบผู้สูงอายุเดินทางมาเพียงลำพังเพื่อรอพบชายชื่อ \"ชัย\" ซึ่งอ้างว่าเป็นนักบิน'","relation":"supports","source_id":"s3"}],"assertion":"On the evening of 16 September 2026 a 66-year-old woman from Lampang was found waiting alone at Chiang Mai airport for a man called 'Chai' who she said was a pilot, having travelled by bus and tuk-tuk to meet him.","causal_attribution":"Chiang Mai Tourist Police account, relayed by several outlets."},{"id":"c2","status":"reported","evidence":[{"locator":"'คุณยายหลงรักตัวละครที่สร้างจากระบบปัญญาประดิษฐ์ (AI) บน Facebook และเข้าใจว่ามีตัวตนอยู่จริง'","relation":"supports","source_id":"s1"},{"locator":"'เมื่อเจ้าหน้าที่ขอดูภาพบุคคลปรากฏเป็นภาพ AI ใน facebook จึงขอให้ตำรวจท่องเที่ยวช่วยประสานญาติ'","relation":"supports","source_id":"s2"},{"locator":"'ได้เสพสื่อโซเชียลมีเดียบน Facebook จนเกิดความหลงรักตัวละครที่สร้างจากระบบปัญญาประดิษฐ์ (AI) และเข้าใจผิดคิดว่ามีตัวตนอยู่จริง'","relation":"supports","source_id":"s3"},{"locator":"'เมื่อเจ้าหน้าที่ตรวจสอบรูปภาพกลับพบว่าเป็นภาพ AI'","relation":"supports","source_id":"s4"}],"assertion":"When officers looked at the man's picture it was an AI-generated image on Facebook; police concluded she had fallen in love with an AI-created character and believed it was a real person.","causal_attribution":"Police assessment on inspecting the picture; who operated the account is not reported."},{"id":"c3","status":"reported","evidence":[{"locator":"'เจ้าหน้าที่เร่งประสานบุตรชาย หลังครอบครัวไม่ทราบว่าคุณยายเดินทางออกนอกพื้นที่'","relation":"supports","source_id":"s1"},{"locator":"'ทางตำรวจท่องเที่ยวเชียงใหม่จึงได้โทรไปบอก ซึ่งไม่ทราบว่าแม่เดินทางมาเชียงใหม่'; 'เช้าวันนี้ ( 17 กันยายน 69 ) ทางเจ้าหน้าที่ได้พาคุณยายนั่งส่งรถแท็กซี่เพื่อไปยังอาเขต'","relation":"supports","source_id":"s2"},{"locator":"'ผู้สูงอายุใช้ภาษาชนเผ่าเป็นหลักและพูดจาสับสน'; 'ก่อนจะอำนวยความสะดวกประสานงานส่งตัวกลับภูมิลำเนาอย่างปลอดภัยในวันรุ่งขึ้น'","relation":"supports","source_id":"s3"}],"assertion":"Communication was difficult because she mainly speaks a hill-tribe language and was confused; police reached her son, who had not known she had left; she stayed overnight in the terminal and was sent home by bus on the morning of 17 September.","causal_attribution":"Police account."},{"id":"c4","status":"reported","evidence":[{"locator":"'รู้จักกับนายชัยผ่านเฟซบุ๊ก ซึ่งอ้างตัวเป็นนักบินประจำสนามบินเชียงใหม่ และหลอกว่าจะนำเครื่องสำอางจากต่างประเทศมาฝาก'; 'เจ้าหน้าที่คาดว่าอาจตกเป็นเหยื่อของแก๊งสแกมเมอร์'; 'สังเกตเห็นภรรยาพูดคุยโทรศัพท์เป็นเวลานานอยู่บ่อยครั้ง และล่าสุดภรรยาบอกว่าจะเดินทางไปพบแพทย์ที่โรงพยาบาลใน จ.เชียงใหม่'; 'จะเร่งตรวจสอบข้อมูลโทรศัพท์ บัญชีเฟซบุ๊ก และประวัติการติดต่อทั้งหมด'","relation":"supports","source_id":"s5"}],"assertion":"Kom Chad Luek reports that she had come to know 'Chai' through Facebook, that he claimed to be a pilot based at Chiang Mai airport and said he would bring her cosmetics from abroad, that officials thought she might be a scammer gang's target, that her husband had noticed her long phone conversations and had been told she was going to a hospital appointment in Chiang Mai, and that her son said he would check her phone, Facebook account and contact history.","causal_attribution":"Kom Chad Luek's own reporting from the family home; the husband's and son's statements."}],"effects":[{"label":"deceived by an AI-generated 'pilot' persona into a lone cross-province journey and stranded overnight at an airport","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.matichon.co.th/local/news_5892707","kind":"news_report","access":"read","language":"th","translation_note":"Read live in Thai on 2026-09-30 (Matichon, 17 September 2026); relays the Chiang Mai Tourist Police account. Researcher translation.","independence_group":"chiang-mai-tourist-police"},{"id":"s2","url":"https://www.amarintv.com/news/social/557772","kind":"news_report","access":"read","language":"th","translation_note":"Read live in Thai on 2026-09-30 (Amarin TV, 17 September 2026); names the reporting Tourist Police officer and adds the son's call and the return arrangements. Researcher translation.","independence_group":"chiang-mai-tourist-police"},{"id":"s3","url":"https://today.line.me/th/v3/article/7Nvkp2Q","kind":"police_social_post_relay","access":"read","language":"th","translation_note":"Read live in Thai on 2026-09-30: the Chiang Mai Tourist Police post as republished by FM91 on LINE Today, 17 September 2026. Researcher translation.","independence_group":"chiang-mai-tourist-police"},{"id":"s4","url":"https://www.thaipbs.or.th/program/WanmaiThaiPBS/watch/288401","kind":"broadcaster_programme_page","access":"read","language":"th","translation_note":"Read live in Thai on 2026-09-30: Thai PBS morning-programme page for 18 September 2026 with a written summary of the segment; the video was not watched. Researcher translation.","independence_group":"chiang-mai-tourist-police"},{"id":"s5","url":"https://www.komchadluek.net/news/crime/622937","kind":"news_report","access":"read","language":"th","translation_note":"Read live in Thai on 2026-09-30 (Kom Chad Luek, 17 September 2026, crime desk): the Tourist Police account plus the husband's and son's comments at the family home in Lampang. The woman, her son, her ethnic group and her district are named there and withheld here. Researcher translation.","independence_group":"komchadluek-family-interview"}],"version":1,"ai_roles":["others_use"],"contexts":["relationships","everyday_life"],"unknowns":["Who operated the Facebook account and whether the messages and phone conversations came from a person or an automated system; Kom Chad Luek describes a man, Siam Blockchain's headline calls the chat partner AI, and the police described only the picture as AI.","Whether any money or gifts were requested or sent.","Whether a complaint was filed about the account."],"geography":{"basis":"She was found at Chiang Mai International Airport, Thailand, having travelled from Lampang province, where she lives (Matichon; Amarin TV). No court is involved.","court_countries":[],"event_countries":["TH"],"affected_person_countries":["TH"]},"publication":{"basis":"Published under the 2026-09-15 charter as an adverse everyday experience involving an AI-generated persona (an elderly woman deceived into a lone journey and stranded overnight); the AI system's relation to her is unknown. The account is the Chiang Mai Tourist Police's, relayed by Thai outlets. Her name, district and ethnic group are withheld.","reviewed_on":"2026-09-30"},"ai_involvement":{"basis":"Chiang Mai Tourist Police say the picture of the man she came to meet was an AI-generated image on Facebook and that she had fallen for an AI-created character (Matichon; Amarin TV; the police post via FM91; Thai PBS). Kom Chad Luek's own report describes a man claiming to be a pilot and does not mention AI. No forensic analysis is reported and the account was not identified. Thai PBS says she talked with a man claiming to be a pilot, and her husband describes long phone conversations (Kom Chad Luek), so she was in two-way contact with someone; no source establishes whether that was a person using the image or an automated account, so the relation is recorded as unknown.","status":"reported"},"person_relations":["unknown"]},"name":"Chiang Mai, Thailand: a 66-year-old woman from Lampang travelled alone to Chiang Mai airport on 16 September 2026 to meet a 'pilot' she had fallen for on Facebook; tourist police found his picture was AI-generated, contacted her son and sent her home the next morning","summary":"At about 8 pm on 16 September 2026, airport security and Chiang Mai Tourist Police found a 66-year-old woman from Lampang province waiting alone in the passenger terminal of Chiang Mai airport for a man called 'Chai', who she said was a pilot she had come to meet. She had travelled by bus from Lampang and taken a tuk-tuk to the airport. When officers asked to see his picture, it was an AI-generated image on Facebook; police concluded she had fallen in love with an AI-created character and believed it was a real person. Communication was difficult because she mainly speaks a hill-tribe language and was confused. Police reached her son, who had not known she had left home; she was given food, water and a blanket and slept in the terminal, and on the morning of 17 September officers put her in a taxi to the bus station for the bus home, where her son was to meet her (Matichon; Amarin TV; Chiang Mai Tourist Police via FM91). Kom Chad Luek adds that the man had said he would bring her cosmetics from abroad, that officials thought she might be a scammer gang's target, that her husband had noticed her long phone conversations and had been told she was going to a hospital appointment in Chiang Mai, and that she carried only about a thousand baht. No financial loss is reported.","incidentDate":"2026-09-16","incidentEndDate":"2026-09-17","incidentKind":"bounded_series","incidentDatePrecision":"day","exposurePattern":"unknown","reportedDate":"2026-09-17","aiSystem":"AI-generated images of a fictitious 'pilot' on a Facebook profile (per Chiang Mai Tourist Police); whether she exchanged messages with a person or an automated account is not reported","aiProduct":"Unidentified image tool","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"An elderly woman was deceived by an AI-generated 'pilot' persona on Facebook into a lone cross-province journey, waited in vain at an airport and was stranded overnight until police contacted her family (Chiang Mai Tourist Police via Matichon, Amarin TV and FM91).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"exact","affectedCountEvidence":"One person, the 66-year-old woman (Matichon; Amarin TV). Exact 1.","victimAgeRange":"elderly","jurisdiction":"TH","platformType":"other","outcomeType":"media_coverage","outcomeStatus":"resolved","primarySourceUrl":"https://www.matichon.co.th/local/news_5892707","primarySourceLabel":"มติชน (Matichon), 17 September 2026: หญิงวัย 66 ปี นั่งรถข้ามจว. ตามเสียงหัวใจ รอเจอ ‘หนุ่มนักบิน’ ก่อนพบความจริง ตกหลุมรัก AI","firstPublishedAt":"2026-09-30T04:13:42.313455+00:00","updatedAt":"2026-09-30T04:13:42.313455+00:00","scopeVersion":"facts-v3","tags":["ai-generated-images","fake-persona","romance-scam","elderly","facebook","thailand","chiang-mai","tourist-police"]},{"id":"2025-san-francisco-waymo-robotaxis-bike-lane-cyclist-alleges-injury-lawsuit","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"Feb. 16, just after noon","relation":"supports","source_id":"s1"},{"locator":"traveling northwest on Seventh Street between Stevenson and Market streets in a marked bike lane, the lawsuit says.","relation":"supports","source_id":"s1"},{"locator":"was carrying four passengers, having stopped to","relation":"supports","source_id":"s4"},{"locator":"carrying four passengers pulled over to the right side curb on the one-way street next to a no-stopping sign, the suit says.","relation":"supports","source_id":"s1"},{"locator":"The 26-year-old said she flew into a second Waymo and landed on the ground","relation":"supports","source_id":"s1"}],"assertion":"On 16 February 2025 a cyclist riding in a marked bike lane on Seventh Street in San Francisco collided with the door of a stopped Waymo robotaxi and was thrown into a second Waymo, according to the cyclist's lawsuit and statement.","causal_attribution":"The account is the plaintiff's, as stated in the lawsuit and a statement she released. No independent witness, police record or vehicle data was inspected. The other outlets rewrite the Chronicle report."},{"id":"c2","status":"reported","evidence":[{"locator":"Safe Exit system, designed to warn passengers of such incoming hazards, failed in the February crash.","relation":"supports","source_id":"s1"},{"locator":"There was no alert issued in the illegally parked car as according to the passengers.","relation":"supports","source_id":"s1"},{"locator":"was not alerted to PLAINTIFF’s presence","relation":"supports","source_id":"s4"}],"assertion":"The cyclist alleges that Waymo's Safe Exit system, which is meant to warn passengers of approaching cyclists and pedestrians, failed to alert the passengers before the door opened.","causal_attribution":"Allegation in a civil complaint. The claim that no alert was issued is the cyclist's account of what the passengers told her, and Waymo has not responded to it in the inspected sources."},{"id":"c3","status":"reported","evidence":[{"locator":"to a hospital with “serious bodily injuries,” the suit says.","relation":"supports","source_id":"s1"},{"locator":"PLAINTIFF sustained serious bodily injuries and was transported via ambulance","relation":"supports","source_id":"s4"},{"locator":"I feel anxious, stressed, and unsafe.","relation":"supports","source_id":"s1"},{"locator":"She said she suffered a brain injury, along with spine and soft tissue damage, and the crash has kept her out of work and off bikes.","relation":"supports","source_id":"s1"}],"assertion":"The cyclist was taken by ambulance to a hospital and reports a brain injury with spine and soft tissue damage that has kept her out of work and off bicycles. She also says she feels anxious, stressed and unsafe.","causal_attribution":"The complaint states \"serious bodily injuries\" and ambulance transport and does not name a brain injury. The brain, spine and soft tissue injuries and the work absence come from the plaintiff as reported by the Chronicle. No medical record was inspected."},{"id":"c4","status":"reported","evidence":[{"locator":"and its parent company, Alphabet, this month in San Francisco County Superior Court alleging battery, emotional distress and negligence while seeking unspecified damages.","relation":"supports","source_id":"s1"},{"locator":"(Strict Products Liability)","relation":"supports","source_id":"s4"}],"assertion":"The cyclist sued Waymo and Alphabet in June 2025 in San Francisco County Superior Court alleging battery, emotional distress, negligence and (in the complaint) strict products liability, and seeking unspecified damages.","causal_attribution":"The Chronicle article (dated 19 June 2025, updated 20 June 2025) describes the filing. The complaint (dated 6 June 2025) was inspected and lists four causes of action: intentional battery, intentional infliction of emotional distress, general negligence and strict products liability."},{"id":"c5","status":"reported","evidence":[{"locator":"Waymo wouldn’t comment on the lawsuit, but pointed to its own safety data which it said records 78% fewer injuries caused by collisions compared with human drivers covering the same distance in the cities it serves.","relation":"supports","source_id":"s1"}],"assertion":"Waymo declined to comment on the lawsuit and cited its own safety data, which it said records 78% fewer injuries caused by collisions than human drivers over the same distance in the cities it serves.","causal_attribution":"Company statement relayed by the Chronicle. The safety figure was not checked and does not address this collision."}],"effects":[{"label":"Cyclist injured (brain, spine and soft tissue) in a bike-lane collision with a Waymo passenger door and a second Waymo, alleged in a lawsuit","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.sfchronicle.com/bayarea/article/s-f-cyclist-sues-waymo-doored-robotaxi-20385289.php","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"sf-chronicle-lawsuit-report"},{"id":"s2","url":"https://futurism.com/cyclist-waymo-collision-injury","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"sf-chronicle-lawsuit-report"},{"id":"s3","url":"https://www.jalopnik.com/1895643/cyclist-sues-waymo-doored-by-driverless-taxi/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"sf-chronicle-lawsuit-report"},{"id":"s4","url":"https://www.courthousenews.com/wp-content/uploads/2025/06/hanki-v-waymo.pdf","kind":"court_filing","access":"read","language":"en","translation_note":"","independence_group":"sf-chronicle-lawsuit-report"}],"version":1,"ai_roles":["others_use","institutional_use"],"contexts":["everyday_life"],"unknowns":["The police report, hospital records and Waymo vehicle data were not inspected. The complaint (dated 6 June 2025) was read and states the plaintiff's allegations only.","Futurism reports that both passengers said it was their first Waymo ride. The Chronicle and the complaint both say the first vehicle carried four passengers, so the Futurism wording is treated as a paraphrase. The complaint gives an unknown number of passengers for the second vehicle.","The complaint states \"serious bodily injuries\" and does not name a brain injury. The brain injury is stated by the plaintiff as reported by the Chronicle.","Whether the passenger opened the door before or after the Safe Exit alert would have fired, and whether the second Waymo caused any contact, is unknown beyond the plaintiff's account.","The cyclist's injuries, work absence and recovery are stated by the cyclist. The current status of the lawsuit is unknown."],"geography":{"basis":"The San Francisco Chronicle places the collision on Seventh Street in San Francisco and the suit in San Francisco County Superior Court. The cyclist's residence is not stated.","court_countries":["US"],"event_countries":["US"],"affected_person_countries":[]},"publication":{"basis":"The San Francisco Chronicle article (read via a Wayback capture of the full text) is the only original report, and the complaint (dated 6 June 2025) was read. Futurism and Jalopnik rewrite the Chronicle, so the news reports and the complaint are kept in one independence group. Every claim is an allegation in a lawsuit or a statement by the plaintiff and stays at reported status. The cyclist, who is named in the reporting, is not named here.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"The lawsuit as reported alleges that a driverless Waymo stopped at a no-stopping curb in a marked bike lane, that its Safe Exit passenger-warning system failed to alert the passengers, and that a second Waymo pulled into the bike lane. No Waymo data or vehicle logs were inspected, and Waymo did not comment on the lawsuit.","status":"reported"},"person_relations":["unknown"]},"name":"San Francisco: cyclist alleges Waymo robotaxi passenger door and a second Waymo injured her in a bike lane, sues Waymo over Safe Exit warning system","summary":"A 26-year-old cyclist alleges in a June 2025 lawsuit that on 16 February 2025 a driverless Waymo carrying four passengers pulled over to the right-side curb beside a no-stopping sign next to a marked bike lane on Seventh Street in San Francisco, that a passenger opened a door into the bike lane, and that she was thrown into a second Waymo that was also pulling into the lane. The complaint states she sustained serious bodily injuries and was taken by ambulance for emergency treatment. The Chronicle reports her saying she suffered a brain injury and spine and soft tissue damage that has kept her out of work and off bicycles. The suit, filed in San Francisco County Superior Court against Waymo and Alphabet, alleges battery, emotional distress, negligence and strict products liability and alleges that Waymo's Safe Exit passenger-warning system failed. Waymo did not comment on the suit and pointed to its own safety data. These are allegations reported by the San Francisco Chronicle.","incidentDate":"2025-02-16","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"unknown","reportedDate":"2025-06-19","aiSystem":"Waymo Driver (driverless robotaxis) and its Safe Exit passenger-alert system","aiProduct":"Waymo Driver","aiCompany":"Waymo","severity":"medium","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["physical_injury","psychological_distress"],"harmOutcomeSummary":"The San Francisco Chronicle reports the cyclist's lawsuit (serious bodily injuries, ambulance to a hospital) and the Chronicle's report that she said she suffered a brain injury and spine and soft tissue damage and has been unable to work or ride a bicycle and feels anxious and unsafe.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"exact","affectedCountEvidence":"One cyclist reports being injured. The passengers of the two vehicles are not reported harmed.","victimAgeRange":"adult","platformType":"other","primarySourceUrl":"https://www.sfchronicle.com/bayarea/article/s-f-cyclist-sues-waymo-doored-robotaxi-20385289.php","primarySourceLabel":"San Francisco Chronicle (19-20 Jun 2025)","firstPublishedAt":"2026-09-29T13:29:21.120943+00:00","updatedAt":"2026-09-30T01:17:15.082984+00:00","scopeVersion":"facts-v3","tags":["historical-2025"]},{"id":"2025-nsw-resilient-homes-program-applicant-data-uploaded-to-chatgpt","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"The upload took place between 12 and 15 March 2025.","relation":"supports","source_id":"s1"},{"locator":"The breach occurred when a former temporary staff member of the RA uploaded data containing personal information to an unsecured Artificial Intelligence (AI) tool which was not authorised by RA.","relation":"supports","source_id":"s1"},{"locator":"The data shared was contained in a Microsoft Excel spreadsheet with 10 columns and more than 12,000 rows of information.","relation":"supports","source_id":"s1"},{"locator":"Between 12 and 15 March 2025, personal information was uploaded by a former contractor of the RA to the Artificial Intelligence platform ChatGPT.","relation":"supports","source_id":"s4"},{"locator":"\"Personal information was uploaded by a former contractor of the RA to the artificial intelligence platform ChatGPT,\" an RA spokesperson said.","relation":"supports","source_id":"s2"},{"locator":"although it actually occurred over six months ago, between March 12 and 15.","relation":"supports","source_id":"s3"}],"assertion":"Between 12 and 15 March 2025 a former temporary staff member or contractor of the NSW Reconstruction Authority uploaded a spreadsheet of Northern Rivers Resilient Homes Program applicant data (10 columns, more than 12,000 rows) to ChatGPT, an AI tool the Authority had not authorised.","causal_attribution":"The Authority's own statements report the upload and its dates. The role is described as a former temporary staff member on the current page and a former contractor on the earlier notice and in the press."},{"id":"c2","status":"reported","evidence":[{"locator":"2031 people who provided information to the RA for the RHP had some of their data uploaded to ChatGPT.","relation":"supports","source_id":"s1"},{"locator":"Sensitive personal information","relation":"supports","source_id":"s1"},{"locator":"no driver's licence numbers, Medicare numbers, passport numbers, or Tax File Numbers were disclosed in the breach.","relation":"supports","source_id":"s1"},{"locator":"The breach shared the names and addresses of program applicants, as well as email addresses, phone numbers, and other personal and health information.","relation":"supports","source_id":"s2"},{"locator":"Up to 3000 individuals may be impacted by the breach.","relation":"supports","source_id":"s4"},{"locator":"Sensitive health information","relation":"supports","source_id":"s1"}],"assertion":"The Authority confirmed through external forensic analysis that 2031 program participants had some of their data uploaded to ChatGPT, including name, contact details, address, date of birth and sensitive personal information (an earlier notice said up to 3000 people and included health information); it said no driver licence, Medicare, passport or Tax File Numbers were disclosed.","causal_attribution":"The Authority's own statements report the count and data categories from its forensic analysis."},{"id":"c3","status":"reported","evidence":[{"locator":"There is no evidence that any of the uploaded data is publicly available online or has been accessed by a third party at this stage.","relation":"supports","source_id":"s1"},{"locator":"There is no evidence that any information has been made public, however this cannot be ruled out,","relation":"supports","source_id":"s2"}],"assertion":"The Authority said it found no evidence that the uploaded data was publicly available or accessed by a third party, and that this could not be ruled out at the time of the first notice.","causal_attribution":"The Authority's statement. Whether OpenAI retained or used the data is not addressed in the inspected sources."},{"id":"c4","status":"reported","evidence":[{"locator":"we are deeply sorry for the distress it may cause for those involved in the program.","relation":"supports","source_id":"s1"},{"locator":"I feel concerned — the information with the RA was deeply personal,","relation":"supports","source_id":"s2"}],"assertion":"The Authority apologised for the distress the breach may cause, and one program participant told the ABC the information held by the Authority was deeply personal and that they felt concerned.","causal_attribution":"Concern is one participant's stated reaction. No sources report identity misuse or other realised loss."},{"id":"c5","status":"reported","evidence":[{"locator":"The NSW Reconstruction Authority will provide compensation for any reasonable out of pocket expenses if any compromised identity documents need to be replaced.","relation":"supports","source_id":"s4"},{"locator":"We are working with Social Futures to reach out to people who have been impacted and ID Support NSW, a government identity and cyber security support service, to assist anyone whose data may have been compromised.","relation":"supports","source_id":"s1"}],"assertion":"The Authority offered support through ID Support NSW and said it would compensate reasonable out-of-pocket expenses to replace compromised identity documents.","causal_attribution":"The Authority's statements about its response."}],"effects":[{"label":"personal and sensitive information of 2031 Resilient Homes Program participants was uploaded to ChatGPT without authorisation","claim_id":"c2","direction":"negative"},{"label":"one participant reports concern about the deeply personal information held; the Authority apologised for possible distress","claim_id":"c4","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.nsw.gov.au/departments-and-agencies/nsw-reconstruction-authority/resilient-homes-program-data-breach","kind":"official_statement","access":"read","language":"en","translation_note":"Full body read by curl on 2026-09-29 (page last updated 26 March 2026, with previous updates listed).","independence_group":"nsw-ra-statement"},{"id":"s2","url":"https://www.abc.net.au/news/2025-10-06/data-breach-northern-rivers-resilient-homes-program-chatgpt/105855284","kind":"news_report","access":"read","language":"en","translation_note":"Full body read by curl. Relays the Authority statement; the participant quote is a separate interview within the same article, used only for that person's stated concern.","independence_group":"nsw-ra-statement"},{"id":"s3","url":"https://www.itnews.com.au/news/nsw-gov-contractor-uploaded-excel-spreadsheet-of-flood-victims-data-to-chatgpt-620815","kind":"news_report","access":"read","language":"en","translation_note":"Full body read by curl. Relays the Authority breach notice; the monitoring comment is the outlet's own.","independence_group":"nsw-ra-statement"},{"id":"s4","url":"https://www.nsw.gov.au/departments-and-agencies/nsw-reconstruction-authority/media-releases/northern-rivers-resilient-homes-program-data-breach","kind":"official_statement","access":"read","language":"en","translation_note":"Full body read by curl. Authority media release of the first notice (October 2025).","independence_group":"nsw-ra-statement"}],"version":1,"ai_roles":["institutional_use"],"contexts":["privacy","public_services","everyday_life"],"unknowns":["Whether ChatGPT (OpenAI) retained or used the uploaded data, and any deletion outcome.","Whether any participant suffered identity misuse or other realised loss; none is reported.","Exact number of affected people at the first notice (up to 3000) versus the confirmed 2031.","Whether the uploader was a temporary staff member or a contractor (the Authority uses both terms).","The findings of the independent review beyond the Authority's summary of it."],"geography":{"basis":"The upload was made by a person working for the NSW Reconstruction Authority (a New South Wales Government agency) using data from its Northern Rivers Resilient Homes Program; the ABC describes the affected people as northern NSW residents.","court_countries":[],"event_countries":["AU"],"affected_person_countries":["AU"]},"publication":{"basis":"Published as a concrete government-agency privacy incident involving an unauthorised AI upload with a confirmed count of affected people. The facts of the upload rest on the agency's own notices, which the press relayed. No misuse of the data is reported and the harm is exposure of personal and sensitive information. The uploader and affected people are not named.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"The Authority states the data was uploaded to ChatGPT and that its forensic analysis confirmed 2031 people had data uploaded. The AI system received the data; the sources do not report any ChatGPT output affecting the participants.","status":"supported"},"person_relations":["unknown"]},"name":"New South Wales: a former staff member or contractor of the NSW Reconstruction Authority uploaded a spreadsheet of Resilient Homes Program applicant data to ChatGPT; the Authority confirmed 2031 people had data uploaded","summary":"The NSW Reconstruction Authority says that between 12 and 15 March 2025 a former temporary staff member (earlier described as a former contractor) uploaded an Excel spreadsheet with 10 columns and more than 12,000 rows from the Northern Rivers Resilient Homes Program to ChatGPT, an AI tool the Authority had not authorised. The Authority first disclosed the breach on 6 October 2025 as affecting up to 3000 people and later confirmed through external forensic analysis that 2031 people had data uploaded, including names, contact details, addresses, dates of birth and sensitive personal information (an earlier notice also listed health information). It reports no evidence that the data was made public or accessed by a third party, and that no driver licence, Medicare, passport or Tax File Numbers were included. The Authority apologised, offered ID Support NSW assistance and committed to compensate reasonable document replacement costs. One participant told the ABC they were concerned. No misuse of the data is reported.","incidentDate":"2025-03-12","incidentEndDate":"2025-03-15","incidentKind":"bounded_series","incidentDatePrecision":"range","exposurePattern":"single_interaction","reportedDate":"2025-10-06","aiSystem":"ChatGPT (OpenAI), used through an unauthorised upload of program data by a person working for the NSW Reconstruction Authority","aiProduct":"ChatGPT","aiCompany":"OpenAI","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"The NSW Reconstruction Authority reports that personal and sensitive information of 2031 Resilient Homes Program participants was uploaded to ChatGPT without authorisation; it reports no evidence of public exposure or third-party access, and no realised misuse is reported (the Authority's notices and press coverage relaying them).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":0,"affectedCountStatus":"unquantified","affectedCountEvidence":"The Authority states that external forensic analysis confirmed 2031 people had some of their data uploaded to ChatGPT. Those people are exposed people and are not counted as harmed: no source reports a consequence to them beyond the exposure. One participant told the ABC of concern, and the ABC does not state that this person is among the 2031. The earlier estimate of up to 3000 is not used. The uploader is not counted.","victimAgeRange":"unknown","jurisdiction":"AU-NSW","platformType":"chatbot","outcomeType":"investigation_opened","outcomeStatus":"resolved","primarySourceUrl":"https://www.nsw.gov.au/departments-and-agencies/nsw-reconstruction-authority/resilient-homes-program-data-breach","primarySourceLabel":"NSW Reconstruction Authority: Resilient Homes Program data breach","firstPublishedAt":"2026-09-29T12:41:19.196147+00:00","updatedAt":"2026-09-30T01:17:12.628427+00:00","scopeVersion":"facts-v3","tags":["historical-2025"]}]}