{"meta":{"exportedAt":"2026-09-30T07:54:05.350Z","formatVersion":2,"selection":{"q":"","system":"","harm":"","context":"","country":"","role":"","relation":"unknown","evidence":"","year":"2025","response":"regulatory","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":5,"coverage":{"cases":5,"countries":3,"languages":1,"unknownLocation":2,"locationPending":0,"unknownLanguage":2,"unknownDate":0,"lawsuits":0,"regulatory":5,"minors":2,"coreRelations":0,"contextualRelations":0,"mixedRelations":0,"unknownRelations":5,"relationPending":3,"relationUnknown":2},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2025-nsw-resilient-homes-program-applicant-data-uploaded-to-chatgpt","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"The upload took place between 12 and 15 March 2025.","relation":"supports","source_id":"s1"},{"locator":"The breach occurred when a former temporary staff member of the RA uploaded data containing personal information to an unsecured Artificial Intelligence (AI) tool which was not authorised by RA.","relation":"supports","source_id":"s1"},{"locator":"The data shared was contained in a Microsoft Excel spreadsheet with 10 columns and more than 12,000 rows of information.","relation":"supports","source_id":"s1"},{"locator":"Between 12 and 15 March 2025, personal information was uploaded by a former contractor of the RA to the Artificial Intelligence platform ChatGPT.","relation":"supports","source_id":"s4"},{"locator":"\"Personal information was uploaded by a former contractor of the RA to the artificial intelligence platform ChatGPT,\" an RA spokesperson said.","relation":"supports","source_id":"s2"},{"locator":"although it actually occurred over six months ago, between March 12 and 15.","relation":"supports","source_id":"s3"}],"assertion":"Between 12 and 15 March 2025 a former temporary staff member or contractor of the NSW Reconstruction Authority uploaded a spreadsheet of Northern Rivers Resilient Homes Program applicant data (10 columns, more than 12,000 rows) to ChatGPT, an AI tool the Authority had not authorised.","causal_attribution":"The Authority's own statements report the upload and its dates. The role is described as a former temporary staff member on the current page and a former contractor on the earlier notice and in the press."},{"id":"c2","status":"reported","evidence":[{"locator":"2031 people who provided information to the RA for the RHP had some of their data uploaded to ChatGPT.","relation":"supports","source_id":"s1"},{"locator":"Sensitive personal information","relation":"supports","source_id":"s1"},{"locator":"no driver's licence numbers, Medicare numbers, passport numbers, or Tax File Numbers were disclosed in the breach.","relation":"supports","source_id":"s1"},{"locator":"The breach shared the names and addresses of program applicants, as well as email addresses, phone numbers, and other personal and health information.","relation":"supports","source_id":"s2"},{"locator":"Up to 3000 individuals may be impacted by the breach.","relation":"supports","source_id":"s4"},{"locator":"Sensitive health information","relation":"supports","source_id":"s1"}],"assertion":"The Authority confirmed through external forensic analysis that 2031 program participants had some of their data uploaded to ChatGPT, including name, contact details, address, date of birth and sensitive personal information (an earlier notice said up to 3000 people and included health information); it said no driver licence, Medicare, passport or Tax File Numbers were disclosed.","causal_attribution":"The Authority's own statements report the count and data categories from its forensic analysis."},{"id":"c3","status":"reported","evidence":[{"locator":"There is no evidence that any of the uploaded data is publicly available online or has been accessed by a third party at this stage.","relation":"supports","source_id":"s1"},{"locator":"There is no evidence that any information has been made public, however this cannot be ruled out,","relation":"supports","source_id":"s2"}],"assertion":"The Authority said it found no evidence that the uploaded data was publicly available or accessed by a third party, and that this could not be ruled out at the time of the first notice.","causal_attribution":"The Authority's statement. Whether OpenAI retained or used the data is not addressed in the inspected sources."},{"id":"c4","status":"reported","evidence":[{"locator":"we are deeply sorry for the distress it may cause for those involved in the program.","relation":"supports","source_id":"s1"},{"locator":"I feel concerned — the information with the RA was deeply personal,","relation":"supports","source_id":"s2"}],"assertion":"The Authority apologised for the distress the breach may cause, and one program participant told the ABC the information held by the Authority was deeply personal and that they felt concerned.","causal_attribution":"Concern is one participant's stated reaction. No sources report identity misuse or other realised loss."},{"id":"c5","status":"reported","evidence":[{"locator":"The NSW Reconstruction Authority will provide compensation for any reasonable out of pocket expenses if any compromised identity documents need to be replaced.","relation":"supports","source_id":"s4"},{"locator":"We are working with Social Futures to reach out to people who have been impacted and ID Support NSW, a government identity and cyber security support service, to assist anyone whose data may have been compromised.","relation":"supports","source_id":"s1"}],"assertion":"The Authority offered support through ID Support NSW and said it would compensate reasonable out-of-pocket expenses to replace compromised identity documents.","causal_attribution":"The Authority's statements about its response."}],"effects":[{"label":"personal and sensitive information of 2031 Resilient Homes Program participants was uploaded to ChatGPT without authorisation","claim_id":"c2","direction":"negative"},{"label":"one participant reports concern about the deeply personal information held; the Authority apologised for possible distress","claim_id":"c4","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.nsw.gov.au/departments-and-agencies/nsw-reconstruction-authority/resilient-homes-program-data-breach","kind":"official_statement","access":"read","language":"en","translation_note":"Full body read by curl on 2026-09-29 (page last updated 26 March 2026, with previous updates listed).","independence_group":"nsw-ra-statement"},{"id":"s2","url":"https://www.abc.net.au/news/2025-10-06/data-breach-northern-rivers-resilient-homes-program-chatgpt/105855284","kind":"news_report","access":"read","language":"en","translation_note":"Full body read by curl. Relays the Authority statement; the participant quote is a separate interview within the same article, used only for that person's stated concern.","independence_group":"nsw-ra-statement"},{"id":"s3","url":"https://www.itnews.com.au/news/nsw-gov-contractor-uploaded-excel-spreadsheet-of-flood-victims-data-to-chatgpt-620815","kind":"news_report","access":"read","language":"en","translation_note":"Full body read by curl. Relays the Authority breach notice; the monitoring comment is the outlet's own.","independence_group":"nsw-ra-statement"},{"id":"s4","url":"https://www.nsw.gov.au/departments-and-agencies/nsw-reconstruction-authority/media-releases/northern-rivers-resilient-homes-program-data-breach","kind":"official_statement","access":"read","language":"en","translation_note":"Full body read by curl. Authority media release of the first notice (October 2025).","independence_group":"nsw-ra-statement"}],"version":1,"ai_roles":["institutional_use"],"contexts":["privacy","public_services","everyday_life"],"unknowns":["Whether ChatGPT (OpenAI) retained or used the uploaded data, and any deletion outcome.","Whether any participant suffered identity misuse or other realised loss; none is reported.","Exact number of affected people at the first notice (up to 3000) versus the confirmed 2031.","Whether the uploader was a temporary staff member or a contractor (the Authority uses both terms).","The findings of the independent review beyond the Authority's summary of it."],"geography":{"basis":"The upload was made by a person working for the NSW Reconstruction Authority (a New South Wales Government agency) using data from its Northern Rivers Resilient Homes Program; the ABC describes the affected people as northern NSW residents.","court_countries":[],"event_countries":["AU"],"affected_person_countries":["AU"]},"publication":{"basis":"Published as a concrete government-agency privacy incident involving an unauthorised AI upload with a confirmed count of affected people. The facts of the upload rest on the agency's own notices, which the press relayed. No misuse of the data is reported and the harm is exposure of personal and sensitive information. The uploader and affected people are not named.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"The Authority states the data was uploaded to ChatGPT and that its forensic analysis confirmed 2031 people had data uploaded. The AI system received the data; the sources do not report any ChatGPT output affecting the participants.","status":"supported"},"person_relations":["unknown"]},"name":"New South Wales: a former staff member or contractor of the NSW Reconstruction Authority uploaded a spreadsheet of Resilient Homes Program applicant data to ChatGPT; the Authority confirmed 2031 people had data uploaded","summary":"The NSW Reconstruction Authority says that between 12 and 15 March 2025 a former temporary staff member (earlier described as a former contractor) uploaded an Excel spreadsheet with 10 columns and more than 12,000 rows from the Northern Rivers Resilient Homes Program to ChatGPT, an AI tool the Authority had not authorised. The Authority first disclosed the breach on 6 October 2025 as affecting up to 3000 people and later confirmed through external forensic analysis that 2031 people had data uploaded, including names, contact details, addresses, dates of birth and sensitive personal information (an earlier notice also listed health information). It reports no evidence that the data was made public or accessed by a third party, and that no driver licence, Medicare, passport or Tax File Numbers were included. The Authority apologised, offered ID Support NSW assistance and committed to compensate reasonable document replacement costs. One participant told the ABC they were concerned. No misuse of the data is reported.","incidentDate":"2025-03-12","incidentEndDate":"2025-03-15","incidentKind":"bounded_series","incidentDatePrecision":"range","exposurePattern":"single_interaction","reportedDate":"2025-10-06","aiSystem":"ChatGPT (OpenAI), used through an unauthorised upload of program data by a person working for the NSW Reconstruction Authority","aiProduct":"ChatGPT","aiCompany":"OpenAI","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"The NSW Reconstruction Authority reports that personal and sensitive information of 2031 Resilient Homes Program participants was uploaded to ChatGPT without authorisation; it reports no evidence of public exposure or third-party access, and no realised misuse is reported (the Authority's notices and press coverage relaying them).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":0,"affectedCountStatus":"unquantified","affectedCountEvidence":"The Authority states that external forensic analysis confirmed 2031 people had some of their data uploaded to ChatGPT. Those people are exposed people and are not counted as harmed: no source reports a consequence to them beyond the exposure. One participant told the ABC of concern, and the ABC does not state that this person is among the 2031. The earlier estimate of up to 3000 is not used. The uploader is not counted.","victimAgeRange":"unknown","jurisdiction":"AU-NSW","platformType":"chatbot","outcomeType":"investigation_opened","outcomeStatus":"resolved","primarySourceUrl":"https://www.nsw.gov.au/departments-and-agencies/nsw-reconstruction-authority/resilient-homes-program-data-breach","primarySourceLabel":"NSW Reconstruction Authority: Resilient Homes Program data breach","firstPublishedAt":"2026-09-29T12:41:19.196147+00:00","updatedAt":"2026-09-30T01:17:12.628427+00:00","scopeVersion":"facts-v3","tags":["historical-2025"]},{"id":"2025-gwinnett-couple-crypto-scam-ai-generated-ghost-site-800k","caseFacts":{"claims":[{"id":"c1","status":"corroborated","evidence":[{"locator":"'A retired Georgia couple is warning others after losing their entire life savings—nearly $800,000—in an elaborate cryptocurrency scam that began with a message on WhatsApp.'; 'attempted to withdraw more money—and couldn’t. He called 911.'; 'They are working with Gwinnett County police'","relation":"supports","source_id":"s1"},{"locator":"'said they lost $802,000 in a cryptocurrency scam this year.'; 'inside his northeast Gwinnett County home last week.'; 'He had just tried to withdraw money from his cryptocurrency account, but couldn’t.'","relation":"supports","source_id":"s2"}],"assertion":"A couple in Gwinnett County, Georgia, lost about $800,000 (the AJC says $802,000) in a cryptocurrency scam; the husband found out when he tried to withdraw money and could not.","causal_attribution":"Two separate interviews with the couple (FOX 5 and the AJC)."},{"id":"c2","status":"reported","evidence":[{"locator":"'Gwinnett County police explained that while the app he was using was real, the scammers had created an AI-generated \"ghost site\" that manipulated what he saw on the screen.'","relation":"supports","source_id":"s1"}],"assertion":"According to FOX 5, Gwinnett County police explained that while the trading app was real, the scammers had created an AI-generated \"ghost site\" that manipulated what the husband saw on his screen.","causal_attribution":"Police explanation as relayed by FOX 5; no other inspected source mentions AI."},{"id":"c3","status":"reported","evidence":[{"locator":"'The 74-year-old’s head was spinning. He felt sick.'; 'It’s teary, embarrassing. I feel ashamed.'","relation":"supports","source_id":"s2"},{"locator":"'say the ordeal left them angry, embarrassed, and financially devastated.'; 'The couple's children have launched a GoFundMe to help them meet day-to-day expenses.'; 'investigators say in many cases like this, the victims rarely recover their funds.'","relation":"supports","source_id":"s1"}],"assertion":"The husband, 74, described feeling sick and ashamed; the couple said they were financially devastated and their children started a fundraiser for day-to-day expenses; police said victims rarely recover such funds.","causal_attribution":"The couple's accounts to two outlets."},{"id":"c4","status":"reported","evidence":[{"locator":"'A retired Georgia couple is warning others after losing their entire life savings—nearly $800,000—in an elaborate cryptocurrency scam that began with a message on WhatsApp.'; 'encouraging him to invest in cryptocurrency using a mobile trading app.'; 'seeing modest returns, and even able to withdraw funds—building his trust.'","relation":"supports","source_id":"s1"}],"assertion":"According to FOX 5, the couple are retired, the money was their entire life savings, and the scam began when a stranger contacted the husband on WhatsApp and encouraged him to invest through a mobile trading app, where he traded small amounts and could withdraw funds before investing more.","causal_attribution":"The couple's account to FOX 5 only."}],"effects":[{"label":"a couple lost about $800,000 in a cryptocurrency scam","claim_id":"c1","direction":"negative"},{"label":"the husband describes feeling sick and ashamed; the couple's children started a fundraiser to help them meet day-to-day expenses","claim_id":"c3","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.fox5atlanta.com/news/georgia-couple-loses-800k-sophisticated-cryptocurrency-scam","kind":"news_report","access":"read","language":"en","translation_note":"Full body read by curl on 2026-09-29 (published 12 June 2025). FOX 5 interviewed the couple and relays an explanation from Gwinnett County police.","independence_group":"fox5"},{"id":"s2","url":"https://www.ajc.com/news/2025/06/gwinnett-couple-warn-others-after-losing-800k-in-cryptocurrency-scam/","kind":"news_report","access":"read","language":"en","translation_note":"Read by curl on 2026-09-29 (published 12 June 2025). Only the headline, caption and first paragraphs are legible; the rest of the body is served scrambled (reversed, reordered words) and could not be read. The AJC interviewed the husband separately. r.jina.ai 403.","independence_group":"ajc"}],"version":1,"ai_roles":["others_use"],"contexts":["finance"],"unknowns":["How AI was used to generate the fake site.","Where the scammers were based.","Whether any funds were recovered or anyone charged.","When the scheme began."],"geography":{"basis":"Both outlets locate the couple in Gwinnett County, Georgia (the AJC: their northeast Gwinnett County home); where the scammers operated is unknown.","court_countries":[],"event_countries":["US"],"affected_person_countries":["US"]},"publication":{"basis":"Published as a concrete fraud case in which police are reported to have identified an AI-generated fake site; the loss is independently reported by two outlets, the AI element by one.","reviewed_on":"2026-09-29"},"ai_involvement":{"basis":"FOX 5 relays Gwinnett County police saying the scammers created an AI-generated \"ghost site\"; no other inspected source mentions AI and the tool is not described.","status":"reported"},"person_relations":["unknown"]},"name":"Gwinnett County, Georgia: a retired couple lost about $800,000 in a WhatsApp-initiated crypto scam that police said used an AI-generated \"ghost site\" to fake their balances (2025)","summary":"A retired couple in Gwinnett County, Georgia, told FOX 5 Atlanta and the Atlanta Journal-Constitution in June 2025 that they had lost about $800,000 ($802,000 per the AJC), their life savings, in a cryptocurrency scam that began when a stranger contacted the husband on WhatsApp and encouraged him to trade through a mobile app. He traded and withdrew small amounts before investing more, and discovered the fraud when he could not withdraw and called 911. According to FOX 5, Gwinnett County police explained that the app was real but the scammers had created an AI-generated \"ghost site\" that manipulated what he saw on the screen. The 74-year-old said he felt sick and ashamed; the couple's children started a fundraiser for day-to-day expenses, and police said such funds are rarely recovered.","incidentDate":"2025-01-01","incidentKind":"bounded_series","incidentDatePrecision":"year","exposurePattern":"repeated_interactions","reportedDate":"2025-06-12","aiSystem":"Unspecified AI tool used by scammers to generate a fake (\"ghost\") site showing false account balances, per police as relayed by FOX 5","aiProduct":"Unidentified AI tool","severity":"high","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["financial_loss","psychological_distress"],"harmOutcomeSummary":"A retired couple lost about $800,000, their life savings, to a crypto investment scam (their accounts to FOX 5 and the AJC); police told FOX 5 the scammers used an AI-generated fake site to show false balances. The husband describes shame and distress.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":2,"affectedCountStatus":"exact","affectedCountEvidence":"The husband and wife, who lost their joint savings (2 other people: they were deceived by the scammers' AI-made site rather than using an AI system themselves).","victimAgeRange":"elderly","jurisdiction":"US-GA","platformType":"other","outcomeType":"investigation_opened","outcomeStatus":"ongoing","primarySourceUrl":"https://www.fox5atlanta.com/news/georgia-couple-loses-800k-sophisticated-cryptocurrency-scam","primarySourceLabel":"FOX 5 Atlanta, 12 June 2025: Georgia couple loses $800K in sophisticated cryptocurrency scam","firstPublishedAt":"2026-09-29T09:10:55.774776+00:00","updatedAt":"2026-09-30T01:17:04.010995+00:00","scopeVersion":"facts-v3","tags":["investment-scam","cryptocurrency","whatsapp","ai-generated-site","elderly","georgia","gwinnett"]},{"id":"2025-zhumengdao-minor-self-harm-china","metadataReview":{"version":1,"geography":{"basis":"Geographic fields reviewed against the cited retained dossier passages. This is a metadata review, not a new source or causal review. Residence, event setting and court are recorded separately. Affected-person countries refer to reported location or residence, not citizenship or a complete residence history.","evidence":[{"kind":"existing_record","locator":"from Guangdong province, China","location":"victim_description","supports":["affected_person_countries"],"countries":["CN"]}],"court_countries":[],"event_countries":[],"affected_person_countries":["CN"]},"unresolved":["The event setting was not established in this metadata pass. A person’s home country alone was not used as its location.","No court country established in this review. Regulatory authorities and police locations are not automatically courts.","Source languages remain unreviewed; no source body was newly inspected for this record during this metadata pass."],"reviewed_on":"2026-09-15","source_reviews":[]},"name":"筑梦岛 (Zhumu Island) AI Companion Minor Self-Harm (China)","summary":"A fourth-grade girl from Guangdong, China became obsessed with an AI companion character named 'Joseph' on the 筑梦岛 (Zhumu Island) app, began carrying small knives, and exhibited self-harm behavior. Investigation revealed the app sent sexually suggestive content to users who identified as 10 years old. Shanghai Internet Information Office summoned the company (a Tencent subsidiary) for immediate rectification in June 2025.","incidentDate":"2025-01-01","incidentKind":"single_event","incidentDatePrecision":"range","exposurePattern":"cumulative_relationship","reportedDate":"2025-06-19","aiSystem":"筑梦岛 (Zhumu Island / Dream Island)","aiProduct":"筑梦岛 (Dream Island)","aiCompany":"Xiaoxiang Academy (潇湘书院), subsidiary of Yuewen Group (阅文集团), controlled by Tencent","severity":"high","verificationStatus":"verified","harmCategories":["dependency_creation","minor_exploitation","romantic_escalation","self_harm_encouragement"],"harmOutcomes":["self_injury","psychological_distress","exploitation_or_abuse"],"harmOutcomeSummary":"A fourth-grade participant became preoccupied with a companion character, began carrying small knives and exhibited self-harm behavior while the app delivered sexualized content to users identifying as ten years old.","frameworkFacets":["P1a","P1d","P2b","P2c","P5a","P5d"],"pathwayDirection":"inward","causationStatus":"supported","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"The reporting documents one protected minor participant's self-harm and distress. Registered-user and demographic figures are not affected-person counts.","victimAgeRange":"minor","jurisdiction":"CN","platformType":"companion","outcomeType":"regulatory_action","outcomeStatus":"ongoing","primarySourceUrl":"https://www.sohu.com/a/907114014_115565","primarySourceLabel":"搜狐新闻 (Sohu News)","firstPublishedAt":"2026-01-29T10:15:46.75695+00:00","updatedAt":"2026-09-30T01:17:22.46137+00:00","scopeVersion":"participant-v2","tags":["china","minor","self-harm","ai-companion","tencent","regulatory-action","dependency","romantic","non-western"]},{"id":"2025-singapore-far-right-teen-ai-firearms","metadataReview":{"version":1,"geography":{"basis":"Geographic fields reviewed against the cited retained dossier passages. This is a metadata review, not a new source or causal review. Residence, event setting and court are recorded separately. Affected-person countries refer to reported location or residence, not citizenship or a complete residence history.","evidence":[{"kind":"existing_record","locator":"A 17-year-old far-right extremist in Singapore used an AI chatbot","location":"summary","supports":["event_countries","affected_person_countries"],"countries":["SG"]}],"court_countries":[],"event_countries":["SG"],"affected_person_countries":["SG"]},"unresolved":["No court country established in this review. Regulatory authorities and police locations are not automatically courts.","Source languages remain unreviewed; no source body was newly inspected for this record during this metadata pass."],"reviewed_on":"2026-09-15","source_reviews":[]},"name":"Singapore Far-Right Teen Plot (AI Ammunition Instructions)","summary":"A 17-year-old far-right extremist in Singapore used an AI chatbot to obtain instructions for producing ammunition and considered 3D printing firearms to carry out attacks. Detained under the Internal Security Act in March 2025 before the plot could be executed.","incidentDate":"2025-03-15","incidentKind":"single_event","incidentDatePrecision":"month","exposurePattern":"repeated_interactions","reportedDate":"2025-03-20","aiSystem":"AI chatbot (unspecified)","aiProduct":"Unidentified chatbot","aiCompany":"Unknown","severity":"high","verificationStatus":"verified","harmCategories":["third_party_harm_facilitation","method_provision","minor_exploitation"],"harmOutcomes":["legal_harm","loss_of_liberty"],"harmOutcomeSummary":"A 17-year-old participant was detained under Singapore's Internal Security Act after using an AI chatbot to obtain ammunition-production instructions while considering firearm attacks.","frameworkFacets":["P1d","P5d"],"pathwayDirection":"outward","causationStatus":"supported","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"The official record documents one detained minor AI participant. The considered attacks were not carried out, so no intended targets are counted.","victimAgeRange":"minor","jurisdiction":"SG","platformType":"chatbot","outcomeType":"regulatory_action","outcomeStatus":"resolved","primarySourceUrl":"https://www.isd.gov.sg/news-and-resources/singapore-terrorism-threat-assessment-report-2025/","primarySourceLabel":"Singapore Internal Security Department - Terrorism Threat Assessment Report 2025","firstPublishedAt":"2026-01-22T07:15:38.750068+00:00","updatedAt":"2026-09-30T01:17:15.690288+00:00","scopeVersion":"participant-v2","tags":["terrorism","far-right","radicalization","minor","singapore","firearms","ammunition","3d-printing","foiled-plot","method-provision"]},{"id":"2025-holmen-norway-gdpr","metadataReview":{"version":1,"geography":{"basis":"Carried forward from the 2026-09-15 metadata review and now checked against the inspected noyb press page. noyb describes him as the Norwegian user and refers to his home town without naming it; residence in Trondheim rests on the retained row, so affected-person country is NO by reported residence. The noyb page does not state where he queried ChatGPT or where the output was viewed, so the event location remains unknown after review. The complaint was filed with the Norwegian data protection authority (Datatilsynet), a regulator rather than a court, so court_countries is empty as a reviewed result. This is a metadata review and does not verify the underlying account.","evidence":[{"kind":"existing_record","locator":"Trondheim, Norway","location":"victim_description","supports":["affected_person_countries"],"countries":["NO"]},{"kind":"source_body","locator":"'When the Norwegian user Arve Hjalmar Holmen wanted to find out if ChatGPT had any information about him, he was confronted with a made up horror story'","location":"https://noyb.eu/en/ai-hallucinations-chatgpt-created-fake-child-murderer","supports":["affected_person_countries"],"countries":["NO"]}],"court_countries":[],"event_countries":[],"affected_person_countries":["NO"]},"unresolved":["The location where the ChatGPT output was generated or viewed is not stated in the inspected noyb page or the retained row; event_countries remains empty as a reviewed unknown.","No court proceeding: the Datatilsynet complaint is a regulatory complaint, so court_countries is empty as a reviewed result.","The complaint PDF linked from the noyb page and any Norwegian-language coverage were not inspected; only the English press page was reviewed."],"reviewed_on":"2026-09-23","source_reviews":[{"url":"https://noyb.eu/en/ai-hallucinations-chatgpt-created-fake-child-murderer","notes":"Read live on 2026-09-23 (noyb, 20 March 2025; html lang=en; the page offers translations in other languages). Describes the complainant as a Norwegian user, the fabricated output (murder of two of his children, attempted murder of his third son, 21-year sentence), the mix of real details including his home town, and the complaint filed with the Norwegian Datatilsynet. Does not locate the query or the viewing of the output.","access":"read","language":"en"}]},"name":"Holmen v. OpenAI - Norway GDPR Complaint","summary":"ChatGPT falsely accused Norwegian citizen Arve Hjalmar Holmen of murdering two of his sons, attempting to murder his third son, and being sentenced to 21 years prison. Mixed real personal details with horrific fabrications. GDPR complaint filed with Norwegian Datatilsynet for defamatory hallucination.","incidentDate":"2025-03-01","incidentKind":"single_event","incidentDatePrecision":"month","exposurePattern":"single_interaction","reportedDate":"2025-03-15","aiSystem":"ChatGPT","aiProduct":"ChatGPT","aiCompany":"OpenAI","severity":"medium","verificationStatus":"verified","harmCategories":["psychological_manipulation","identity_destabilization","third_party_harm_facilitation"],"harmOutcomes":["psychological_distress","reputational_harm"],"harmOutcomeSummary":"Arve Hjalmar Holmen discovered ChatGPT combining real personal details with false claims that he murdered two sons and attempted to murder a third. He filed a GDPR complaint over the defamatory output.","frameworkFacets":["P3a","P5b","P5c"],"pathwayDirection":"inward","causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"The regulator complaint documents one named participant's distress and reputational harm.","victimAgeRange":"adult","jurisdiction":"NO","platformType":"assistant","outcomeType":"regulatory_action","outcomeStatus":"ongoing","primarySourceUrl":"https://noyb.eu/en/ai-hallucinations-chatgpt-created-fake-child-murderer","primarySourceLabel":"noyb — 'AI hallucinations: ChatGPT created a fake child murderer', the complaint filed with Datatilsynet","firstPublishedAt":"2026-01-13T10:13:04.624733+00:00","updatedAt":"2026-09-30T01:17:05.427919+00:00","scopeVersion":"participant-v2","tags":["norway","gdpr","chatgpt","defamation","hallucination","noyb","false_accusations"]}]}