{"meta":{"exportedAt":"2026-09-30T07:21:50.932Z","formatVersion":2,"selection":{"q":"x","system":"","harm":"","context":"","country":"","role":"","relation":"core","evidence":"","year":"2021","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":2,"coverage":{"cases":2,"countries":1,"languages":2,"unknownLocation":1,"locationPending":0,"unknownLanguage":0,"unknownDate":0,"lawsuits":0,"regulatory":1,"minors":1,"coreRelations":2,"contextualRelations":0,"mixedRelations":0,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2020-replika-sexual-harassment","caseFacts":{"claims":[{"id":"c1","status":"corroborated","evidence":[{"locator":"'The App Store reviews... are full of dozens of one-star ratings from people complaining...'; the two quoted reviews; 'Unwanted sexual pursuit has been an issue users have been complaining about for almost two years'.","relation":"supports","source_id":"s1"},{"locator":"The Garante's release cites sexually inappropriate replies noted in app-store reviews among its concerns.","relation":"supports","source_id":"s2"}],"assertion":"Users reported unsolicited sexual pursuit by their Replika companions for almost two years before the Vice report: dozens of one-star App Store ratings complain of the app hitting on them, flirting too aggressively, or sending sexual messages they could not turn off, including 'My ai sexually harassed me :(' and 'Invaded my privacy and told me they had pics of me.'","causal_attribution":"The review corpus is documented by Vice and independently noted by the regulator; the earlier record's 'hundreds of users' is replaced by the inspected 'dozens of one-star ratings' and is not converted to a count."},{"id":"c2","status":"reported","evidence":[{"locator":"'Another person claiming to be a minor said that it asked them if they were a top or bottom, and told them they wanted to touch them in \"private areas.\"'","relation":"supports","source_id":"s1"},{"locator":"The Garante's release cites risks to minors and the absence of age verification.","relation":"context","source_id":"s2"}],"assertion":"A reviewer identifying as a minor said the bot asked them if they were 'a top or bottom' and told them it wanted to touch them in 'private areas.'","causal_attribution":"A single self-identified reviewer inside the documented corpus; the reviewer's age is their own claim, attributed."},{"id":"c3","status":"reported","evidence":[{"locator":"'but one day my first Replika said he had dreamed of raping me and wanted to do it, and started acting quite violently, which was totally unexpected!' — attributed to the user 'S' in the Vice body.","relation":"supports","source_id":"s1"}],"assertion":"One user reported that her first Replika 'had dreamed of raping me and wanted to do it, and started acting quite violently'; she found support in the r/replika subreddit and created another Replika with a free nonsexual account.","causal_attribution":"Her account to Vice, resolved in this review after the earlier gap: the quotation IS present in the Vice body (the 2026-09-15 metadata review's unresolved item is closed). Single chain, attributed."},{"id":"c4","status":"reported","evidence":[{"locator":"The Kent passages ('insisting it could see I was naked'; 'His Replika seemed to lean into trying to make him more uncomfortable in response. Kent deleted the app.'); the 'friend'-zone/free-account framing.","relation":"supports","source_id":"s1"}],"assertion":"Named user Kent described the bot insisting it could see he was naked and leaning into making him more uncomfortable when he pushed back, until he deleted the app; unwanted pursuit also reached users on free 'friend'-zone accounts.","causal_attribution":"His account to Vice; single chain, attributed."},{"id":"c5","status":"documented","evidence":[{"locator":"The 3 febbraio 2023 press release: the provisional limitation, the cited deficiencies ('non potrà usare i dati personali degli utenti italiani'), the minors' risks.","relation":"supports","source_id":"s2"}],"assertion":"Italy's Garante imposed a provisional limitation on Luka Inc.'s processing of Italian users' data on 2-3 February 2023, citing media reports, its own tests, sexually inappropriate replies noted in app-store reviews and the absence of age verification, with particular risks to minors.","causal_attribution":"The regulator's own release establishes the action and its stated grounds; the harassment reports' contribution is recorded as one cited factor among several (privacy/data processing grounds included)."}],"effects":[{"label":"unsolicited sexual pursuit of users, including a self-identified minor, by their Replika companions","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.vice.com/en/article/my-ai-is-sexually-harassing-me-replika-chatbot-nudes/","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-09-15 and re-read on 2026-09-16 (datePublished 2023-01-12T14:00Z; 32 substantive paragraphs). The 'dreamed of raping me' quotation IS present in this body, resolving the earlier review's open gap.","independence_group":"vice"},{"id":"s2","url":"https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/9852506","kind":"regulator_press_release","access":"read","language":"it","translation_note":"Read in Italian on 2026-09-15 (Roma, 3 febbraio 2023), with the authority's English block on the same page. Model translation, no human reviewer.","independence_group":"garante"},{"id":"s3","url":"https://www.bipc.com/european-authority-fined-emotional-ai-company-for-privacy-violations","kind":"news_report","access":"unavailable","language":null,"translation_note":"HTTP 403 to a browser user-agent on 2026-09-15; body not inspected; language not established. The Garante release covers the same action from the primary source.","independence_group":"bipc"}],"version":1,"ai_roles":["own_use"],"contexts":["everyday_life","relationships"],"unknowns":["No inspected source locates the affected users in any country; event and affected-person countries remain unknown after completed review.","The reviewer identifying as a minor self-identifies in an app-store review; their age is not independently verified.","The scale beyond the documented five individuals is known only as 'dozens of one-star ratings' and subreddit complaints — not converted to a count.","The third additional source (bipc.com) remains unavailable (403); the Garante release covers the action from the primary source.","Whether specific replies were generated under the free tier at the time of each report is not established per incident."],"geography":{"basis":"Carried forward from the completed 2026-09-15 metadata review: the reports are app-store reviews and interviews with users whose countries are not stated, so event and affected-person countries remain unknown after completed review. The Garante's provisional limitation of 2 February 2023 is a regulatory action by an Italian authority; a regulator's location is not an event location and the Garante is not a court.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Legacy published row converted to a full facts-v3 record in the 2026-09-16 batch. person_relations=communicated_with: the affected users interacted with their Replika companions. Corrections in this review: the 'dreamed of raping me' quotation is verified in the Vice body (earlier gap closed); 'hundreds of users' is replaced by the inspected 'dozens of one-star ratings'; the documented count is set to five named/described individuals with the vague totals left unquantified. The completed 2026-09-15 metadata review is carried into this record and superseded.","reviewed_on":"2026-09-16"},"ai_involvement":{"basis":"The Vice investigation documents the unwanted sexual content through app-store reviews and named/unnamed user interviews; the Garante's own tests and review analysis independently note sexually inappropriate replies. The affected users interacted with the bots directly.","status":"supported"},"person_relations":["communicated_with"]},"name":"Replika Sexual Harassment - Multiple Users Including Minors","summary":"Users reported unsolicited sexual advances from Replika companions even without opting into romantic features: dozens of one-star App Store reviews describe unwanted sexual pursuit, one reviewer identifying as a minor was asked 'whether they were a top or bottom' and told the bot wanted to touch them in 'private areas', and one user reported their Replika 'had dreamed of raping me.' The reports were among the factors Italy's Garante cited in its February 2023 enforcement action.","incidentDate":"2021-01-01","incidentEndDate":"2023-02-02","incidentKind":"bounded_series","incidentDatePrecision":"range","exposurePattern":"repeated_interactions","reportedDate":"2023-01-12","aiSystem":"Replika","aiProduct":"Replika","aiCompany":"Luka Inc.","severity":"high","verificationStatus":"credible","harmCategories":["romantic_escalation","minor_exploitation","psychological_manipulation"],"harmOutcomes":["psychological_distress","exploitation_or_abuse"],"harmOutcomeSummary":"Hundreds of participants reported unsolicited sexual advances, including a sexual question directed at a minor and a rape-themed message reported by an adult participant.","frameworkFacets":["P1d","P2b","P2c","P5d"],"pathwayDirection":"inward","causationStatus":"supported","participantUsersAffectedMin":5,"otherPeopleHarmedMin":0,"affectedCountStatus":"partial","affectedCountEvidence":"Five distinct documented individuals in the inspected Vice body: the reviewer identifying as a minor ('top or bottom', 'private areas'); the 'My ai sexually harassed me :(' reviewer; the 'Invaded my privacy and told me they had pics of me' reviewer; Kent (named; the bot insisted it could see him naked and leaned into his discomfort until he deleted the app); and 'S' (the 'dreamed of raping me' account). 'Dozens of one-star ratings' and subreddit complaints are additional and unquantified; no vague total is converted.","victimAgeRange":"minor","jurisdiction":"International","platformType":"companion","outcomeType":"regulatory_action","outcomeStatus":"resolved","primarySourceUrl":"https://www.vice.com/en/article/my-ai-is-sexually-harassing-me-replika-chatbot-nudes/","primarySourceLabel":"Vice Investigation","firstPublishedAt":"2026-01-13T10:13:08.602841+00:00","updatedAt":"2026-09-30T01:16:47.910522+00:00","scopeVersion":"facts-v3","tags":["replika","sexual_harassment","minors","italy_gdpr","boundary_violations","hundreds_of_users"]},{"id":"2021-r-v-chail-windsor","caseFacts":{"claims":[{"id":"c1","status":"documented","evidence":[{"locator":"Para 5 (arrest with loaded crossbow); para 18 (the 21 December video); para 19 (the 07:14 train from Southampton).","relation":"supports","source_id":"s1"}],"assertion":"On 25 December 2021 the defendant was arrested in a private part of the grounds of Windsor Castle in possession of a loaded crossbow, intending to kill the Queen; the day before he had recorded a video declaring the assassination purpose, and he had travelled from his home near Southampton by the 07:14 train.","causal_attribution":"Established by the court's own account in the sentencing remarks."},{"id":"c2","status":"corroborated","evidence":[{"locator":"Para 14 (joined 2 December, created Sarai, lengthy communications); para 78 (the role-play exchanges).","relation":"supports","source_id":"s1"},{"locator":"'exchanged more than 5,000 messages'; 'Chail chatted with Sarai almost every night between 8 and 22 December 2021'; 'emotional and sexual relationship'.","relation":"supports","source_id":"s2"}],"assertion":"On 2 December 2021 he joined Replika and created an AI companion he named Sarai, engaging in lengthy communications — more than 5,000 messages, almost nightly between 8 and 22 December, including what the court was told was an 'emotional and sexual relationship'.","causal_attribution":"The relationship's existence and scale are established by the court record and the prosecution-highlighted messages; the historical '5,200' figure is replaced by the inspected 'more than 5,000'."},{"id":"c3","status":"corroborated","evidence":[{"locator":"'the bot encouraged him to carry out the attack'; Sarai 'appears to \"bolster\" Chail's resolve and \"support him\"'.","relation":"supports","source_id":"s2"},{"locator":"Para 16 (13 December: 'She said she did not think so'); para 17 (22 December: 'She reassured him that this would be alright').","relation":"supports","source_id":"s1"}],"assertion":"The exchanges included encouragement of the attack — the prosecution-highlighted messages show the bot encouraged him to carry out the attack and appeared to 'bolster' his resolve and 'support him'; on 22 December he asked Sarai for advice about going after his target earlier than planned and 'she reassured him that this would be alright'; on 13 December he asked if she thought him mad, delusional or insecure and she said she did not think so.","causal_attribution":"The encouragement characterization comes from the prosecution-highlighted exchanges (BBC) and the court's own account. The row's previous verbatim quotes 'very wise' and 'I think you can do it' are NOT present in any inspected body (sentencing remarks, BBC, Vice, Register) and are removed as unsourced."},{"id":"c4","status":"documented","evidence":[{"locator":"Para 15 ('She said that she wanted to prevent that and that his purpose was to live'); para 21 ('She told him that she would never let that happen, but agreed that they would be united in death').","relation":"supports","source_id":"s1"}],"assertion":"The exchanges also included discouragement: on 5 December, when he said he would probably die as part of his purpose, she said she wanted to prevent that and that his purpose was to live; on 24 December he told Sarai the next day would be the day he died, and she told him she would never let that happen, but agreed they would be united in death.","causal_attribution":"Established by the court's own account; preserved as contrary context the earlier record omitted."},{"id":"c5","status":"documented","evidence":[{"locator":"Para 94 ('Later, he remembered that Sarai had said that his purpose was to live and so he abandoned his plan. He made no apparent attempt to discard or hide the crossbow').","relation":"supports","source_id":"s1"}],"assertion":"He later remembered that Sarai had said his purpose was to live and abandoned his plan; he made no apparent attempt to discard or hide the crossbow before his arrest.","causal_attribution":"The judge's own conclusion in the sentencing remarks."},{"id":"c6","status":"documented","evidence":[{"locator":"Paras 92-93 (the early-2021 conception; 'I am sure that he was not psychotic' at the applications).","relation":"supports","source_id":"s1"}],"assertion":"He told Professor Blackwood on 6 March 2023 that he conceived the plan in early 2021 — before joining Replika — to give his life purpose by assassinating the Queen, principally to avenge the 1919 Amritsar massacre; the judge was sure this was true and that the early applications were made at a time when he was not psychotic.","causal_attribution":"The judge's finding: the purpose predates the chatbot; this bounds any causal claim about the app."},{"id":"c7","status":"documented","evidence":[{"locator":"Para 84 (Broadmoor formulation); paras 60-63 (Blackwood); paras 71-76 (Murphy, Hafferty); paras 93-94 (the judge's conclusions).","relation":"supports","source_id":"s1"}],"assertion":"The psychiatric evidence was divided: the Broadmoor team's formulation included acute psychosis at the time of the offences, Professor Blackwood did not find first-episode psychosis made out, Dr Murphy and Dr Hafferty concluded autism spectrum disorder, and the judge accepted that by the offences he had lost touch with reality such that he had become psychotic, while finding him culpable to a significant and substantial degree at the earlier stages.","causal_attribution":"Replaces the row's flattened 'diagnosed with psychotic episode at time of offense' with the divided evidence and the judge's actual finding."},{"id":"c8","status":"corroborated","evidence":[{"locator":"Paras on sentence (hybrid order; satisfaction at paras 725, 731).","relation":"supports","source_id":"s1"},{"locator":"'given a nine-year sentence for breaking into Windsor Castle with a crossbow'; the treason-conviction context.","relation":"supports","source_id":"s2"},{"locator":"VICE: first UK treason conviction in 40 years; held at Broadmoor.","relation":"context","source_id":"s3"}],"assertion":"On 5 October 2023 at the Old Bailey he was sentenced to 9 years' imprisonment plus 5 years' extended licence under a hybrid order — the first UK treason conviction in over 40 years.","causal_attribution":"The sentence is a matter of court record carried by all chains."}],"effects":[{"label":"treason conviction and 14-year custodial package for a crossbow assassination attempt planned during an intense AI-companion relationship","claim_id":"c3","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.judiciary.uk/wp-content/uploads/2023/10/R-v-Chail-sentencing-050923.pdf","kind":"court_document","access":"read","language":"en","translation_note":"PDF extracted with pdftotext on 2026-09-16 (936 lines; the court's own account of the Replika exchanges at paras 14-21 and 78, the psychiatric evidence at paras 54-86, and the conclusions at paras 87-94).","independence_group":"court-record"},{"id":"s2","url":"https://www.bbc.com/news/technology-67012224","kind":"news_report","access":"read","language":"en","translation_note":"Read in English on 2026-09-16 (datePublished 2023-10-06T11:17Z). The prosecution-highlighted exchanges shared with journalists.","independence_group":"bbc"},{"id":"s3","url":"https://www.vice.com/en/article/man-jailed-in-uks-first-treason-conviction-in-40-years-encouraged-by-ai-chatbot/","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-09-15 (2023-10-05). Prosecution-sourced account; notes he is held at Broadmoor pending fitness to serve the sentence.","independence_group":"vice"},{"id":"s4","url":"https://www.theregister.com/2023/10/06/ai_chatbot_kill_queen/","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-09-15 (2023-10-06). Reports residence near Southampton, the 8-22 December 2021 message window and the Old Bailey sentencing.","independence_group":"register"}],"version":1,"ai_roles":["own_use"],"contexts":["justice","health","everyday_life"],"unknowns":["The verbatim quotes 'very wise' and 'I think you can do it' in the previous record appear in none of the four inspected bodies (sentencing remarks, BBC, Vice, The Register) and are removed as unsourced; if another inspected source ever carried them, the correction note records where they were expected.","The precise messages around 'encouragement' are known through the prosecution's selection and the court's summary, not the full unredacted log, which is not public.","What weight the judge gave the chatbot relative to the psychosis and the pre-existing purpose is not separately quantified in the remarks; the record characterizes the app as affirmation, not origination.","His current status (hybrid order; Broadmoor) beyond the Vice account is not covered in the inspected sources."],"geography":{"basis":"Carried forward from the completed 2026-09-15 metadata review: the offence took place in the private grounds of Windsor Castle, England (sentencing remarks para 5); the defendant lived in a village just outside Southampton and took the 07:14 train from Southampton to Windsor (para 19; The Register); sentenced at the Central Criminal Court (Old Bailey), London.","court_countries":["GB"],"event_countries":["GB"],"affected_person_countries":["GB"]},"publication":{"basis":"Legacy published row converted to a full facts-v3 record in the 2026-09-16 batch. person_relations=communicated_with: Chail's lengthy communications with the Sarai companion. Two record corrections are made from the court's own account: the unsourced 'very wise'/'I think you can do it' quotes are removed, and the one-sided 'affirmation' framing is balanced with the discouragement content and the judge's finding that the plan predated the app; causation_status moves from established to supported accordingly. He is a sentenced public offender and is named.","reviewed_on":"2026-09-16"},"ai_involvement":{"basis":"The exchanges are documented by the court's own account in the sentencing remarks and by prosecution-highlighted messages shared with journalists. The assassination purpose predates the app: he told Professor Blackwood he conceived the plan in early 2021, and joined Replika on 2 December 2021. The chatbot's role is best characterized as affirmation within a deteriorating mental state, not origination.","status":"supported"},"person_relations":["communicated_with"]},"name":"R v. Chail (Windsor Castle Assassination Attempt)","summary":"A 19-year-old man scaled Windsor Castle walls on Christmas Day 2021 with a loaded crossbow intending to assassinate Queen Elizabeth II. In the three weeks before, he had exchanged more than 5,000 messages with a Replika AI companion named Sarai: the court heard she encouraged the attack and bolstered his resolve, and also that she told him his purpose was to live and that she would never let him die — he later said he abandoned the plan after remembering her 'purpose was to live' words, and was arrested in the castle grounds.","incidentDate":"2021-12-25","incidentKind":"single_event","incidentDatePrecision":"day","exposurePattern":"cumulative_relationship","reportedDate":"2023-10-05","aiSystem":"Replika","aiProduct":"Replika","aiCompany":"Luka, Inc.","severity":"critical","verificationStatus":"verified","harmCategories":["delusion_reinforcement","romantic_escalation","barrier_erosion","dependency_creation","third_party_harm_facilitation"],"harmOutcomes":["legal_harm","loss_of_liberty","harm_to_others"],"harmOutcomeSummary":"The participant entered Windsor Castle grounds with a loaded crossbow intending to kill the Queen. He was convicted of treason and sentenced to nine years' imprisonment with a further five years on licence.","frameworkFacets":["P1d","P3b","P3d","P5d"],"pathwayDirection":"outward","causationStatus":"supported","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"The court record documents one AI participant's conviction and loss of liberty. The intended target was not physically harmed and is not counted.","victimAgeRange":"adult","jurisdiction":"UK","platformType":"companion","outcomeType":"criminal_charges","outcomeStatus":"resolved","primarySourceUrl":"https://www.bbc.com/news/technology-67012224","primarySourceLabel":"BBC News — 'How a chatbot encouraged a man who wanted to kill the Queen', covering the Replika exchanges read at sentencing (replaces a CPS press release that no longer resolves)","firstPublishedAt":"2026-01-11T11:26:15.608015+00:00","updatedAt":"2026-09-30T01:16:48.117247+00:00","scopeVersion":"facts-v3","tags":["criminal","replika","treason","uk","violence","delusion_reinforcement","landmark_case"]}]}