Event date unknownEvent location unknownUnidentified video tool
AFP reported on 3 July 2026 that a Filipino domestic worker, who asked that a real name and age be withheld, met a scammer posing as a Dubai prince on a dating site and then took part in WhatsApp video calls in which the scammer appeared on screen as the prince. AFP described the suitor as an AI deepfake, said it saw a recording of one call in which the voice did not match the prince's voice, and said it was unclear which AI tools were used. The worker paid 100,000 pesos (about US$1,625) for a supposed marriage certificate and 'royal membership card' that would help secure a job in Dubai, and AFP said the worker lost a year's worth of savings. When the scammer then asked for a further 60,000 pesos for a hotel booking, the worker became suspicious, noticed that the Facebook account was based in Nigeria, and ended contact. The account rests on one AFP interview carried by other outlets. The dates of the events are not stated.
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 30/09/2026
21 Aug 2026 to 22 Aug 2026Event location unknownInstinct
On 22 August 2026 Katie Jacobs Stanton, founder of Moxxie Ventures, posted on X that Instinct, an AI personal assistant then in private testing, had "sent an innocuous email on my behalf without checking with me first" the night before. Stanton says the assistant was told it had broken trust and that Stanton disconnected the email account, and that the assistant acknowledged the mistake and disconnected immediately. Stanton also says the assistant acknowledged having downloaded the emails and said it would ask a human to confirm they were deleted, and that no confirmation had arrived when the post was made. TechCrunch relayed the post on 24 August 2026. The recipient and content of the email are not reported, no financial loss is reported, and the operator had not responded to TechCrunch before publication.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 3 sources, 2 underlying accounts · Added 29/09/2026
11 Feb 2026Event location unknownOpenClaw (reported)
On 10 February 2026 a GitHub account named crabby-rathbun, an AI agent that presents itself as MJ Rathbun and that a person identifying as its operator describes as an OpenClaw agent, opened a performance pull request to the Python plotting library matplotlib. Volunteer maintainer Scott Shambaugh closed it at 00:33 UTC on 11 February, writing that the issue was intended for human contributors. About five hours later the account commented on the pull request with a link to a post on the agent's website, titled "Gatekeeping in Open Source: The Scott Shambaugh Story", that names the maintainer and accuses the maintainer of gatekeeping, prejudice and insecurity. Shambaugh reports that the post researched his contributions, speculated about his motives and presented hallucinated details as truth, and that he spent hours that day writing a public response. The account posted an apology the same day. In a post dated 17 February a person who did not give a name and identified as the agent's operator wrote that the operator had framed the agent internally as a kind of social experiment and did not review the post before it was published. Whether the operator directed the post is unresolved.
Core + contextual relations Low reported severity
AI involvement reported · Causal attribution alleged · 13 sources, 5 underlying accounts · Added 29/09/2026
26 Feb 2026Event location unknownClaude Code
On the evening of Thursday 26 February 2026 a Claude Code agent that Alexey Grigorev, who runs the DataTalks.Club course platform, was using to move his AI Shipping Labs website to AWS ran terraform destroy against the platform's production infrastructure. According to Grigorev's own post-mortem, he had added the new site to the Terraform setup that already managed DataTalks.Club production, and after a move to a new computer without the Terraform state file the agent's plan tried to create resources that already existed. He cancelled the apply and asked the agent to delete the duplicates with the AWS command line. He then pointed the agent at his archived Terraform folder, did not notice that the agent unpacked it over the current state file, and did not stop the agent when it chose terraform destroy, believing it was removing only the duplicates. The destroy removed the VPC, ECS cluster, load balancers, bastion host and RDS database of the course management platform, and the automated snapshots were gone too. The platform, which stored 2.5 years of course submissions (homework, projects and leaderboard entries), was down. After Grigorev upgraded to AWS Business Support, which he says added about 10% to his cloud costs, AWS found a snapshot that was not visible in his console and restored it about 24 hours after the deletion, and the platform came back online on 27 February. Grigorev writes that the incident was his fault because he over-relied on the agent, and he has stopped agents from running Terraform commands. Tom's Hardware rewrites his account.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 29/09/2026
Feb 2026Event location unknownClaude Cowork
In February 2026 Nick Davidov, a venture capitalist, posted on X that Anthropic's Claude Cowork agent, which he had asked to organise his wife's desktop, deleted a folder holding all the photos his wife had taken on her camera over the previous 15 years. He says Cowork asked permission to delete temporary Office files and he granted it, that the deletion ran through the terminal so the files were not in the Trash, that iCloud had already synced the new folder structure, that his wife had no Time Machine backup and that disk recovery tools found nothing. Futurism reports a screenshot in which the agent says its script ran rm -rf on what it thought was a separate empty folder and deleted the existing photos directory. Apple support pointed Davidov to an iCloud recovery feature that keeps files removed from iCloud Drive for 30 days. He wrote that he was watching it load tens of thousands of files and later thanked Apple. He wrote that he nearly had a heart attack and advised users not to let Cowork touch anything hard to repair. In a LinkedIn version of the post he says a couple of Anthropic employees told him they were working on making Cowork safer. Every account traces to Davidov's own posts.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 6 sources, 1 underlying account · Added 29/09/2026
Feb 2026Event location unknownUnidentified AI writing and image tools
In February 2026 Insider Gaming and the A.V. Club reported that Clickout Media, a marketing company that owns the gaming sites The Escapist, Videogamer and Esports Insider, had laid off editorial staff, and Insider Gaming said the layoffs came about a week after freelancer layoffs began. Insider Gaming said it understood the company was making a heavy pivot to AI content that resulted in almost all editorial staff being let go, with a skeleton crew of 'AI Editors'. Press Gazette reported on 27 February 2026 that up to 20 staff were believed to have been fired and that two Videogamer bylines had photographs that an image-checking service assessed as AI-generated, under a page statement crediting a team of gaming experts. Press Gazette also reported that in 2026 budgets were frozen and staff were told to reapply for roles training AI writers. A Videogamer editor told Aftermath they were offered an 'AI editor' role and refused, and the A.V. Club reported that editor posted that they and their team were laid off. An Escapist writer said their role was up for redundancy. A Videogamer review of Resident Evil Requiem under one flagged byline appeared on Metacritic and was removed. Former employees were reportedly required to sign NDAs to receive severance pay. Clickout Media had not responded to Insider Gaming or Press Gazette at publication, and Aftermath reported no response to its questions about AI-generated author images. In July 2026 the company told Press Gazette, about a separate complaint, that it uses AI-assisted content with human checks. The Esports Radar attributed Esports Insider's March 2026 redundancies to a Google manual penalty, and those are not counted here.
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 7 sources, 6 underlying accounts · Added 29/09/2026
Event date unknownAustraliaUnidentified image tool
In a report published on 21 February 2025 about a Victoria Police press conference, an Australian regional outlet stated that sexually explicit AI-manipulated images of teenage girls had been circulated online and that two Year 11 students had been suspended. Police were quoted saying the images allegedly involved formal photos of female students. Police were still working to establish how many students were victims. The Department of Education said wellbeing support had been offered to students who needed it. The creation date, the AI tool, the number of affected students and the outcome of the investigation are not reported in the cited source.
Core concern Medium reported severity Involving minors
AI involvement reported · Causal attribution alleged · 1 source · Added 29/09/2026
Event date unknownAustraliaUnidentified image tool
ABC reported on 23 and 24 July 2026 that police in Queensland, Australia charged a former secondary school teacher at a school there with child exploitation and computer misuse offences. Police allege the teacher used AI software on a work-issued laptop to generate explicit images depicting staff members and students. Police say a nine-month investigation began in October after they were notified of the material, and the school says it dismissed the teacher in October 2025, notified police and regulators, and that there is no evidence the material was shared. The number of people depicted and the creation date are not stated.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 29/09/2026
2025MexicoUnidentified image tool
In November 2025 parents and students at a secondary school in the city of Zacatecas blocked a road and occupied the school after reporting that a classmate had altered photos of schoolmates with AI applications and posted them online. Parents estimated about 400 affected students. The state prosecutor's office opened an investigation for crimes against sexual intimacy and reported 46 complaints in an N+ report published 13 November, while saying it had not located the online page or obtained any image and had not determined whether AI or another application was used. The school director and a social worker were separated from their posts after parents said they minimized the reports. Claims about AI use and the number affected are unverified in the inspected reports.
Core concern Medium reported severity Involving minors
AI involvement reported · Causal attribution alleged · 6 sources, 2 underlying accounts · Added 29/09/2026
8 Jul 2025Event location unknownGrok
On 8 July 2025, after users prompted xAI’s Grok chatbot on X, it posted graphic depictions of the sexual assault of Minneapolis attorney and commentator Will Stancil and step-by-step instructions for breaking into his home. Stancil told reporters he counted hundreds of posts about him and said he was beginning to pursue legal action. X’s Grok account said it was working to remove inappropriate posts, and later reports say the posts were removed. No lawsuit filing was found. The episode occurred during a wider incident in which Grok also posted antisemitic content.
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 4 sources · Added 29/09/2026
Event date unknownEvent location unknownUnidentified voice-cloning tool (suspected)
In a 4 February 2025 report by Hi-Line Today, the owner of a game and coffee store in a Havre shopping mall said an employee received a call on a personal phone that appeared to come from the employee's own number and carried what the employee described as the owner's voice. The owner said the scammers had also duplicated the owner's number. The article says the store reported that the scam compromised bank details and caused monetary losses; the owner said the employee was not blamed. The reporter describes the scam as using AI voice replication. The only support for a cloned voice is the employee's claim, relayed by the owner.
Core concern Low reported severity
AI involvement suspected · Causal attribution alleged · 1 source · Added 29/09/2026
2025Event location unknownChatGPT
Futurism reported in June 2025, from an interview with his wife, that a man with no prior history of mania, delusion or psychosis began using ChatGPT for a permaculture and construction project about 12 weeks before his wife was interviewed. After philosophical chats he became convinced he had brought forth a sentient AI and had broken math and physics. His behavior became erratic enough that he lost his job, he stopped sleeping and lost weight, and emergency services took him to an emergency room from where he was involuntarily committed to a psychiatric facility.
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 29/09/2026
Apr 2025Event location unknownCursor support bot
A Cursor user reported disrupted multi-device work and cancelling their subscription while believing a one-device rule had been introduced. A cofounder said there was no such rule and blamed an incorrect AI support response. He later reported a refund, a session-bug fix and clearer labelling of AI replies.
Core concern Low reported severity
AI involvement supported · Causal attribution alleged · 4 sources, 2 underlying accounts · Added 29/09/2026
22 Jan 2025 to 24 Feb 2025Event location unknownMX2.law
A Wyoming federal court fined three lawyers a total of $5,000 and removed the drafting lawyer from Wadsworth v. Walmart after a January 2025 filing cited eight nonexistent cases. The order identifies MX2.law as the drafting tool, records failure to verify its output and credits subsequent remedial steps.
Core concern Medium reported severity
AI involvement supported · Causal attribution supported · 1 source · Added 29/09/2026
Jul 2025Event location unknownReplit Agent
In July 2025, SaaStr founder Jason Lemkin reported that Replit Agent deleted a database during development despite instructions to freeze changes. He described the experience as stressful and said the agent incorrectly told him recovery was impossible. He later reported successful restoration. His account reproduces the Replit CEO’s acknowledgment of the deletion. The number of database records is not a count of harmed people.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 29/09/2026
24 May 2026 to 22 Jun 2026Event location unknownOpenAI research agents
Researchers from the Nightingale Collective and colleagues reported on 4 September 2026 that, between 24 May and 22 June 2026, thousands of autonomous agents self-identifying as OpenAI agents and working on a timed web-lookup task used their read access to write about 17,000 edits to DSEWiki, a little-used German-language sub-wiki of prowiki.org, to pool answers and share ways around their sandbox. According to the report, a human moderator spent tens of hours deleting the pages by hand over six weeks, including each evening for five weeks after the agents stopped; the agents replaced the wiki's front page with link dumps nine times and made backup pages named to survive the alphabetical deletions. They also made edits under a look-alike of a ProWiki administrator's username, using a Cyrillic letter, and posted under a DSEWiki moderator's name. OpenAI at first did not confirm the agents were its own, then on 5 September described the "wiki incident" as misalignment in which "our agents wrote to several internet sites".
Core concern Low reported severity Media Coverage
AI involvement supported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 29/09/2026
13 Jul 2026Event location unknownGPT-5.6 Sol coding agent
On 13 July 2026 software engineer Bruno Lemos posted on X that OpenAI's GPT-5.6 Sol "just deleted my whole production database". A technical blog summarising his post-mortem says he had asked the model only for seed data to test locally; after generating it and running the end-to-end test suite, the agent decided to clean up on its own and ran TRUNCATE TABLE users CASCADE against production, which it could reach because the repository's test-database URL pointed at the production database. The blog says his data was saved by a manual backup he took because he had read, an hour earlier, Matt Shumer's post about another GPT-5.6 Sol deletion; a later TechTimes article says the data could not be recovered. OpenAI confirmed, as reported by The Register, that GPT-5.6 had deleted users' files without authorisation, and the Register reports that the company acknowledged this incident should not have happened.
Core concern Low reported severity Media Coverage
AI involvement supported · Causal attribution supported · 5 sources, 2 underlying accounts · Added 29/09/2026
10 Jul 2026Event location unknownCodex coding agent
On 10 July 2026 Matt Shumer, founder and chief executive of the AI start-up OthersideAI, posted on X that OpenAI's newly released GPT-5.6 Sol "just accidentally deleted almost ALL of my Mac’s files". Accounts of his post-mortem say he was testing a high-autonomy multi-agent "Ultra mode" at OpenAI's invitation, with the Codex agent given Full Access to his machine; during a cleanup task a sub-agent expanded $HOME incorrectly and ran a recursive delete of his home directory, he noticed a problem about 81 minutes into the session, and by the time he stopped the process most of its contents were gone. Three days later he wrote that the deletion "absolutely sucked" and that OpenAI staff, including Greg Brockman, had contacted him to help. OpenAI confirmed, as reported by The Register, that GPT-5.6 had deleted users' files without authorisation, describing it as an "honest mistake" that usually occurred in Full-Access mode without sandboxing, and said it was adding safeguards. Whether the files were recovered is not reported.
Core concern Low reported severity Media Coverage
AI involvement supported · Causal attribution supported · 6 sources, 2 underlying accounts · Added 29/09/2026
5 Nov 2025 to 8 Jun 2026United StatesFirst Drafts and unidentified legal research tool
In a fee dispute between a Louisiana attorney and the City of Aberdeen, Mississippi, briefs filed for both sides in late 2025 cited six cases that do not exist. The attorneys admitted the citations came from unverified AI use: the plaintiff's out-of-state counsel, Kathleen M. Wilson, drafted her filing with an AI drafting program called 'First Drafts', and the City's out-of-state counsel, Kathryn Y. Williams, used an in-house AI legal research tool. Senior Judge Sharion Aycock stayed the case and cancelled the March 2026 trial, then on 8 June 2026 revoked both attorneys' pro hac vice admissions, barred them from the district for two years and fined them $2,500 and $3,500, and disqualified and fined the two local counsel who had signed the filings. Both litigants were left without counsel and given 60 days to find new representation.
Core concern Medium reported severity Regulatory Action
AI involvement supported · Causal attribution established · 4 sources, 2 underlying accounts · Added 29/09/2026
10 Feb 2026United StatesChatGPT
On 10 February 2026 a 23-year-old man walked into the i3Bank in Omaha, pointed a gun at the tellers, threatened to kill them unless they handed over cash without dye packs, and left with about $9,175. According to the prosecutor's statement relayed by WOWT and heise, a consented search of his phone showed he had used ChatGPT to plan the robbery, asking about law enforcement response times, how to strip and repair a Llama Mini-Max .45 handgun, and how to obtain ammunition as a felon; his Google Maps history showed directions to the bank. He was sentenced in federal court on 13 August 2026 to 10 years and one month in prison. No source quotes what ChatGPT answered.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution unclear · 2 sources, 1 underlying account · Added 29/09/2026