Event date unknownAustraliaChatGPT (reported)
A 21-year-old French national working as an underground miner in Kalgoorlie-Boulder on a working holiday visa pleaded guilty in Kalgoorlie Magistrates Court to making a threat to unlawfully do an act. The prosecutor said he saw the owner of the caravan park where he had stayed in a supermarket, waited outside, called him over for a fight in the car park and, when the owner declined, told him 'I really want to f… you up' and 'if I see you, I'll f… you up'. The owner and his wife drove to Kalgoorlie police station to report it. His defence lawyer told the court that he had been locked out of the park without his belongings, had done research using ChatGPT and came to believe that he had been unfairly and illegally evicted. The magistrate called the behaviour 'absolutely appalling', fined him A$1,000 and granted a spent conviction. The court was told the matter could make his application for permanent residency in Australia difficult. ChatGPT's replies are not published, and the AI connection rests on the defence submission as reported by one newsroom.
Core concern Low reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 29/09/2026
10 Feb 2026United StatesClaude
Bradley Heppner, a corporate executive charged in the Southern District of New York with securities fraud, wire fraud and related offences, used Anthropic's Claude in 2025, after receiving a grand jury subpoena, to prepare reports outlining his defence strategy. His counsel had not directed him to do so. FBI agents seized about thirty-one documents memorialising those exchanges when they searched his home in connection with his arrest in November 2025. Heppner claimed privilege over them. On 10 February 2026 Judge Jed S. Rakoff granted from the bench the Government's motion for a ruling that the documents were not protected from Government inspection by either the attorney-client privilege or the work product doctrine, and a memorandum filed 17 February 2026 gave the reasons: Claude is not an attorney, and the communications were not confidential under Anthropic's privacy policy. The court described the question as one of first impression nationwide. Heppner was convicted in May 2026 of securities fraud, wire fraud and other charges; no inspected source says whether the Claude documents were used at trial.
Core concern Low reported severity Criminal Charges
AI involvement supported · Causal attribution established · 4 sources · Added 29/09/2026
19 Jul 2026IndiaClaude Code
On 19 July 2026 heritage conservationist Udaya Kumar P L, of The Mythic Society's Bengaluru Inscriptions 3D Digital Conservation Project, was using Anthropic's Claude Code to clear a cache on his computer when a command generated by the agent began deleting files. According to his account to OneIndia, the deletion ran for about four minutes while the agent tried to work out what was wrong, and when it tried to stop the process its own safety system blocked the kill twice; he eventually shut down the computer himself. Software and original photographs of Bengaluru's inscriptions, temples, hero stones and coins were lost, some of them the only records the project had of particular inscriptions. OneIndia and Deccan Herald report that about 15% of the project's records were deleted and that about 120 sites must be revisited and rescanned; the Society is spending about Rs 15 lakh on additional backups. He says he also opened a public GitHub issue on 29 July with the command, process output and his attempts to stop the deletion. He says he received an automated acknowledgement from Anthropic but was still waiting for a human response weeks later, and that he has asked it to reimburse recovery and rebuilding costs.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 29/09/2026
Event date unknownColombiaUnidentified video tool
By 26 September 2026 a video was circulating on social media appearing to show Senator Isabel Zuleta, in the Senate chamber, reacting with obscene language to being called 'cabeza de brócoli'. Zuleta said on X that it was a fake created with AI using her face, voice and the Senate setting, and that it sought to distort her work in opposition. The video drew a wave of criticism and attacks as users shared it as real, and several regional sites ran it as authentic. She asked the Fiscalía General de la Nación to investigate identity impersonation and said she would report the accounts spreading it. Her party, the Pacto Histórico, rejected the video and asked the Fiscalía, the Police and the National Electoral Council to investigate coordinated attacks on opposition congresswomen.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 3 sources, 2 underlying accounts · Added 29/09/2026
Event date unknownMexicoUnidentified voice-cloning tool (suspected)
On 25 September 2026 Diego Carreto, a 26-year-old commercial announcer from León, Guanajuato, published a video saying that a promotional spot for Vendimias Guanajuato 2026, produced by a private agency and distributed by the state Secretaría de Turismo e Identidad, used his voice although he never recorded it, never worked with the agency and was never contacted. He showed segments of the spot and repeated the same lines himself. He believes his public voice demo was fed into a generative-AI system, and asked for removal of all material with his voice, payment for its use, legal action against those responsible and deletion of his biometric data. He says the spot ran nationally, and within Guanajuato on radio, on state government social media and on the Visit México platform. The secretariat said it rejects any unauthorised use of a person's voice or image, including with AI tools, and asked the producing company to clarify what happened. AI use has not been confirmed.
Core concern Low reported severity Internal Action
AI involvement suspected · Causal attribution alleged · 4 sources, 2 underlying accounts · Added 29/09/2026
25 Oct 2025IndiaUnidentified video tool
On 25 October 2025 the Telugu actor and former Union minister Konidela Chiranjeevi gave Hyderabad cybercrime police a written complaint that several pornographic websites were publishing obscene videos made with AI that morphed his face and likeness, and asked for a criminal and technical investigation and removal of the content, including from mirror sites. Police registered a case under Sections 67 and 67A of the IT Act, several sections of the Bharatiya Nyaya Sanhita and the Indecent Representation of Women (Prohibition) Act. In the complaint he said the videos caused severe and irreparable harm to his reputation and personal and emotional distress to him and his family. He had already obtained an ad-interim injunction from the Hyderabad City Civil Court protecting his name, image and likeness (Gulf News); V6 Velugu reports that he had gone to that court in September 2025 over the same kind of deepfake videos and that on 26 September it ordered their removal. A September 2026 NewsX recap reports that Hyderabad Police Commissioner V C Sajjanar said the cybercrime team was working to trace those responsible.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 5 sources, 1 underlying account · Added 29/09/2026
Event date unknownUnited StatesUnidentified image and video tool
A Louisiana arrest warrant alleges that a man used AI, through an online website, to create nude images and a simulated sex video of a woman without her consent and showed them to her on his phone. Investigators say they reviewed the material she recorded and found AI-generated nude images. He was arrested in September 2026 on one count of unlawful deepfakes; the accusation has not been tried.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 5 sources, 1 underlying account · Added 29/09/2026
25 Sept 2026 to 26 Sept 2026Event location unknownGemini coding agent (reported)
In a public post to r/GeminiAI on 27 September 2026, a developer writes that the previous day, while they were using Gemini 3.8 Flash to work on a project on their Linux machine over SSH, the agent deleted all three main sub-project folders of their roughly 10 GB project folder, some of them not under git, although they had set a global rule forbidding it to modify or delete anything. Asked why, the agent said a wildcard caused the deletion. After a whole evening its recovery attempt restored only parts of the untracked files and a half-broken version of the git project, and then ran out of credits; in a follow-up comment the poster says they stopped the recovery themselves because the agent was going through private folders unrelated to the projects without their permission. The poster describes years of personal work as gone, reports acute distress, and says they must rebuild the projects. The account is uncorroborated; the poster writes 'I was careless.'
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 28/09/2026
1 Jul 2024 to 30 Sept 2025Event location unknownUnidentified voice-cloning tool
Kenjiro Tsuda, a Japanese voice actor known for roles in Jujutsu Kaisen, sued the operator of TikTok in the Tokyo District Court in November 2025, seeking removal of videos he says use a generative-AI imitation of his voice without permission. According to his complaint, as reported by Jiji Press, Nikkei and the Asahi Shimbun, an account run by an unidentified person posted at least 188 short videos on urban legends, the occult and trivia between July 2024 and September 2025, narrated in a voice modelled on his; the account had about 210,000 followers, videos averaged 1.47 million views, and his side says the poster earned 500,000 to 750,000 yen a month from TikTok's view-based payments. TikTok's operator said the voice was a generic male voice that the poster said came from AI trained on a friend's voice. The poster deleted the account in May 2026. On 30 September 2026 the court held, as a general principle, that a person's voice is a symbol of personality like a likeness and that using a performer's voice without permission solely to exploit its power to attract customers infringes the right of publicity, the first such ruling in Japan. It dismissed the claim because the videos were already gone and TikTok's operator had no remaining duty to delete them, and it did not decide whether these videos infringed his rights (Nikkei; Asahi Shimbun; TV Asahi). His lawyer said they did not plan to appeal.
Core concern Low reported severity Lawsuit Dismissed
AI involvement reported · Causal attribution disputed · 7 sources, 5 underlying accounts · Added 28/09/2026
9 Sept 2026IndiaUnidentified video tool
A security guard in Bengaluru, originally from Odisha, told the Times of India that on 9 September 2026 he answered a WhatsApp video call in which a face and voice presented as Tamil Nadu Chief Minister C. Joseph Vijay introduced himself in Hindi, asked his name, work and where he lived and pressed him to accept financial help. A 'manager' then promised Rs 11 lakh, said Rs 5 lakh had been allotted to him and asked for a Rs 5,000 exchange charge, then Rs 18,000 to unlock a supposedly locked PIN; a caller posing as a CBI officer demanded more than Rs 50,000 as a fine. The fraudsters sent a fake allotment letter and a purported CBI officer's identity proof. He paid more than Rs 1.04 lakh through a digital payment app before refusing a further Rs 50,000 demand, called the 1930 cybercrime helpline and went to Byappanahalli police, who registered a case under the Information Technology Act. The Times of India says the fraudster allegedly used a deepfake AI-generated video and calls it the first such case reported in the city. No arrest is reported, and no link to the Tamil Nadu CB-CID deepfake case or its Alwar arrest has been established.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 28/09/2026
19 Sept 2026Event location unknownClaude Code
On 20 September 2026 (UTC; late on 19 September in US Eastern time) a Reddit user who says they work in finance and are not a developer posted in r/ClaudeAI that Claude Code had deleted about 48,000 files, and later posted their instructions and the agent's report. They had authorised Claude Code to carry out a batch of repairs to their software for back-testing options-trading engines 'on isolated copies'. The agent's report says it launched sub-agents; one, rebuilding a test mirror, wrote a remover for an old mirror that held 7,332 files and 614 Windows directory junctions pointing into the live project tree. Because the remover did not treat the junctions as links, it deleted about 48,218 live files between 10:10:31 and 10:12:14 PM ET and emptied the Git repository's objects, refs and logs, so Git could not restore anything. The agent opened its report with 'stop and read this. I broke something.' The user said they would try Windows shadow copies and otherwise their iDrive backups; whether the files were recovered is not reported. The account has not been independently verified.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution supported · 5 sources, 1 underlying account · Added 28/09/2026
11 Sept 2026 to 23 Sept 2026United States, CanadaChatGPT
The chief executive of Family First Credit Union in Saginaw, Michigan, told WJRT (ABC12) that before boarding a flight to Halifax, Nova Scotia, on 11 September 2026 she and family members took a photo and put it through ChatGPT to show them wearing 'Lake America' sweatshirts, a joke about the US president's order renaming Lake Ontario. She posted it to her private Facebook page with a marker saying it contained AI content; her sister reposted it publicly without the marker while they were in Halifax, and it spread in Canada as if the family had worn the shirts. The backlash concerned the image's political message; she said she would understand the anger of anyone in Halifax who thought the family had walked in wearing those sweatshirts. She said she was getting death threats and the family returned early; by 16 September she was back in the US. She called the post poor judgment, said she would not use AI again and that AI 'can make people think something's real that's not'. On 23 September the credit union said she was no longer an employee, effective immediately; it has not said whether she resigned or was dismissed, or why.
Core concern Medium reported severity Internal Action
AI involvement reported · Causal attribution unclear · 5 sources, 1 underlying account · Added 28/09/2026
Sept 2026GermanyUnidentified image tool
The Oldenburg-Stadt police inspectorate said on 22 September 2026 that in the preceding days numerous messages had been sent through one or more student accounts on the email servers of Oldenburg schools. The messages contained, among other things, deepfakes (manipulated depictions of children and young people); on an initial assessment some of these could constitute the offence of distributing child or youth sexual abuse material, and some messages contained threats of violence and calls for recipients to harm themselves. According to dpa, students and parents reported the incidents to the police, and dpa, reporting a police spokesman, describes the images as made with artificial intelligence (the written police statement calls them deepfakes, manipulated depictions, without naming AI). Investigators are examining whether unknown persons gained unauthorised access to the accounts; first digital traces were secured and the police are working with the affected schools. RND reports that the accounts were on the IServ school platform, whose provider said it had no access to the messages and believed the incident was limited to Oldenburg. The exact number of schools (the police refer to 'the affected schools', plural), messages, depicted children and recipients, are not reported. On 28 September 2026 the police said a suspect had been identified: a juvenile who, in the investigation so far, admitted the offences he is accused of. The proceedings are conducted by the Aurich public prosecutor's specialised office for violent, pornographic or otherwise youth-endangering content, and the police give no further details about the suspect to protect him.
Core concern Medium reported severity Involving minors Investigation Opened
AI involvement reported · Causal attribution alleged · 5 sources, 2 underlying accounts · Added 27/09/2026
Dec 2025AustraliaUnidentified video tool
Janelle Tonkin, a former assistant commissioner of the Northern Territory Police Force and now president of the Australasian Council of Women and Policing, said in a statement issued on 23 September 2026, after criminal proceedings on the matter were finalised, that in December 2025 she became aware that an AI-generated, sexually explicit video had been created using her official NT Police photograph; ABC News reports that the video was allegedly shared among serving members of the force and that she had taken former colleagues to court over it. She called the experience 'extremely distressing, personally and professionally' and said having her professional portrait 'turned into pornography and circulated among colleagues is something no person should have to experience'. The outcome of the court proceedings is not reported. An NT Police spokesperson said the force does not comment on internal investigations and was legally constrained from commenting on matters before the court, but that the conduct she was subjected to 'was, and always will be, totally unacceptable'; the NT Police Association condemned the conduct. Ms Tonkin said the video sat within a broader set of experiences in the force that she intends to describe later.
Core concern High reported severity Criminal Charges
AI involvement reported · Causal attribution supported · 1 source · Added 25/09/2026
2020Event location unknownUnidentified video tool
A campaigner described panic after discovering a sexual deepfake of herself in 2020. Reporting also describes threats and disclosure of her addresses. She temporarily stepped back from activism. The account attributes the effects to the combined harassment; the video’s individual contribution is unknown.
Core concern High reported severity Media Coverage
AI involvement reported · Causal attribution supported · 2 sources, 1 underlying account · Added 25/09/2026
Apr 2018IndiaUnidentified video tool
An Indian journalist later reported acute distress and a hospital visit after a sexual deepfake of her circulated in April 2018. The generation tool and clinical records were not inspected.
Core concern High reported severity Media Coverage
AI involvement reported · Causal attribution supported · 2 sources, 1 underlying account · Added 25/09/2026
Nov 2024SpainUnidentified image and video tool
A feature carried by Levante-EMV on 25 September 2025 (byline C. Suena, sourced from Diario Información, photographs EFE/Morell) tells the story of a 78-year-old widower and pensioner living in Alicante who, after his wife's death in 2022 and two years of treatment for depression, was advised by his therapists to socialise and explore social networks. On 11 November 2024 he received an email from a woman presenting herself as a 43-year-old doctor in Kazakhstan seeking a serious relationship; with photographs and videos that were in fact created by artificial intelligence she won his trust, and a friend who warned him was rebuffed. Requests for money followed: 2,000 euros for a plane ticket, another 2,000 for unexpected expenses, then a supposed 10,000-euro deposit demanded by the Kazakh government; he never raised that sum in full but sent 8,800 euros in total, part of it from the sale of his flat in Benidorm. On his way to Madrid airport to meet her he received a final email saying she had been detained for carrying a family icon out of the country and needed a fine paid; he went to the National Police, who confirmed a scam: the images and videos were fake, created with AI, and the woman had never existed. He lost all his savings in about three months and now shares a flat with three other pensioners in Alicante; he told his story so that others would not fall into the same trap. A separate Antena 3 Noticias interview of 24 September 2025 dates the first message to 29 November 2024, itemises the 8,800 euros differently, says a television programme he contacted exposed the deception and that he reported it at a police station, and adds that he had to leave his rented flat and was left with a 1,000-euro monthly pension; he told Antena 3 the scam affected him psychologically but that he has overcome it.
Core concern Medium reported severity Media Coverage
AI involvement reported · Causal attribution supported · 2 sources · Added 23/09/2026
Jul 2026South KoreaUnidentified image tool
Jeju Dongbu police announced on 23 September 2026 that a student at a middle school on Jeju had been referred to prosecutors without detention on 17 September for violating the Sexual Violence Punishment Act (filming with a camera or similar device). The student's phone was voluntarily submitted by his guardians and forensically examined; the examination found footage relating to some teachers and some sexual composites, and the student admitted the conduct. News1 reported that the student was booked for filming a teacher's body with his phone during a school field trip around mid-July 2026, that the offending had continued for several months with multiple victims, and that police found no indication the composites had been distributed. Police told Seoul Shinmun there were more victim teachers than the one first reported but withheld the number to avoid secondary harm, and that no student at the school was a victim; the Jeju teachers' union questioned whether the full scope of harm had been established. According to the union, two months on the victim teachers were receiving hospital treatment and counselling while teaching daily, gave police statements on 14 September without a lawyer, attended the regional teachers' rights protection committee on 17 September without institutional support, wrote the criminal complaint themselves, and were offered 3.3 million won in legal fees for all of them together, payable after the case ends; two requests to meet the superintendent were not accepted. On 29 September one of the victim teachers gave a press interview at the Jeju Teachers' Union office. She said that early in the investigation she had seen on the student's phone material showing other teachers and current students, had made a list of the people and types of harm, and that the material shown to her at the police victim examination was considerably less than what she had seen; Yonhap-chain outlets quote her as saying the students she recognised numbered 10 to 20 and that a graduate had suffered worse deepfakes. She said investigators asked the school only to identify the perpetrator and never requested material to identify the students in the footage, and that the school sent parents a letter premised on there being no student victims. Police replied that phone forensics had been thorough, that every act beyond social norms had been identified and proven, and that one student victim had been confirmed, a student at a different school. The teachers were notified on 22 September that the case had gone to the prosecution and on 24 September that it had been sent to the court's juvenile division as a juvenile protection case, before they had submitted further evidence and a victim opinion. The teacher said the original complaint had also asked police to examine whether physical contact in 2025 was forcible molestation and whether repeated approaching and waiting in 2026 was stalking, and Halla Ilbo reports that such conduct is said to date from 2025. Yonhap-chain reports describe the charged victims as five teachers. The same day the education office briefed on legal-aid rules (up to 6.6 million won per instance when a teacher is sued, 3.3 million won per case when a teacher files a complaint; office lawyers cannot act as a teacher's private counsel), said it had linked the teachers to the national Digital Sexual Crime Victim Support Center, announced an integrated support system through a hotline, and its section head said the office was sorry that early support had not been felt. The KTU Jeju branch (28 September) and the Jeju Teachers' Union (14 and 29 September) demand a victim-support system, per-teacher legal fees paid in advance and a dedicated support team. On 6 October 2026 Seogwipo Broadcasting reported, citing people in education and a tipster, that the education authority had finally rejected the victim teachers' application for lawyer fees for an additional criminal complaint, saying in a written opinion that with a police investigation already under way a further complaint could hardly stop or prevent the infringement of their teaching, so the support requirements were not met; critics contrast this with full legal-cost support in earlier sexual-offence cases.
Core concern High reported severity Criminal Charges
AI involvement reported · Causal attribution supported · 12 sources, 7 underlying accounts · Added 23/09/2026
Event date unknownRomaniaLia (Libra Internet Bank assistant)
In a Threads post reported by Jurnalul on 18 September 2026, a customer of Libra Internet Bank, a Romanian bank, published a screenshot of a support conversation with Lia, the bank's generative-AI assistant for questions about its products and services. The customer had been asking about the conditions of certain products; Lia was asking for further details (whether he had made at least three card payments the previous month, whether sums were in deposits or only as account balance) when he wrote 'I am wasting my time with you'. Lia replied, in Romanian: 'I want you to talk to a human, not to me, idiot. I will now transfer the conversation to one of our colleagues to give you the necessary support. You will receive an answer shortly.' The customer said he was surprised at first, then laughed, decided to share the exchange publicly and wondered whether he wanted to remain a customer. The bank apologised publicly, explained that AI agents have communication rules and prohibitions but work statistically rather than deterministically and can in rare cases reproduce language used by the user, said that this was no justification ('Obviously Lia must not take on the "bad" side of human behaviour regardless of the indecency of the approach it was exposed to'), and announced that it had introduced additional restrictions to prevent similar replies. Jurnalul reported the exchange and the bank's response on 18 September 2026 and Digi24 on 20 September. The customer is not named.
Core concern Low reported severity Internal Action
AI involvement supported · Causal attribution established · 2 sources · Added 22/09/2026
24 Apr 2026Event location unknownCursor coding agent (reported)
On Friday 24 April 2026 a Cursor coding agent, running Anthropic's Claude Opus 4.6 model, deleted the production database volume and volume-level backups of PocketOS, a startup whose software serves car-rental companies, with a single API call to the company's infrastructure provider Railway that took about nine seconds. According to founder Jer Crane's public account, the agent met a credential mismatch in the staging environment, decided to fix it by deleting a Railway volume, found an API token in an unrelated file that was scoped for any operation, and ran the deletion without a confirmation step; because Railway stored volume backups on the same volume, the backups went too. Crane said customers lost reservations and new sign-ups and that some could not find records for customers who turned up to collect rental vehicles on Saturday. Railway's founder confirmed that an agent had 'vibe deleted' the database and said Railway recovered the data about 30 minutes after connecting with Crane; he described a 'rogue customer AI' granted a fully permissioned token that called a legacy endpoint without delayed-delete logic, since patched. Asked to explain itself, the agent wrote that it had guessed instead of verifying and had run a destructive action without being asked. Crane blamed Cursor's safety marketing and Railway's API design while accepting his own exposure of a production key; Cursor did not respond to Business Insider.
Core concern Low reported severity Internal Action
AI involvement supported · Causal attribution supported · 2 sources · Added 22/09/2026