Event date unknownUnited StatesUnidentified image and video tool
On 24 July 2026 WBRZ, WAFB and the Livingston Parish News relayed a Livingston Parish Sheriff's Office (Louisiana) statement about an investigation into threats made by phone and online. The sheriff's office said one alleged victim was threatened with rape and other bodily harm unless money was paid, AI-generated photos and videos of one of the victims were sent to numerous family members and friends, and later threats included getting one victim fired. Homeland Security assisted after allegations that overseas suspects were involved through past relationships and acquaintances in Greece. The sheriff's office said subpoenas and search returns from platforms led back to a woman who had first been treated as a victim, and that after an interview with the woman the sheriff's office learned the woman made all of the fictitious accounts, the AI-generated nude photos and videos, the rape threats and the extortion attempts. The accused was booked on charges that include unlawful dissemination of AI nude photos, online impersonation and five counts of extortion, and was released on bond. The Livingston Parish News says the accused and one other person had reported as victims some or all of what the sheriff's office attributes to the accused. The charges are allegations and no conviction is reported. The AI tool is not identified, the victims are not described and the start date of the threats is not stated.
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 30/09/2026
7 Jan 2026 to 9 Jan 2026United StatesGrok
After a federal immigration agent killed a woman in Minneapolis on 7 January 2026, X users circulated AI-generated images that purported to show the masked agent's face. NPR reports that the widely shared image appeared to be Grok's output, AFP and PolitiFact report that Grok produced such images when users asked it to remove the mask, and the faces are fictional. Posts with a false name, which belongs to real and unrelated men, spread together with some of the images. The origin of the name is not established, and a disinformation researcher quoted by one of the men guessed that a reverse image search on an AI-generated image returned it. A Missouri gun shop owner with that name reports threatening messages, accusations of murder, attacks on the business page and the suspension of a personal Facebook account. The publisher of the Minnesota Star Tribune, who has the same name, reports hundreds and then thousands of posts naming the publisher as the agent, including calls for vigilante justice, and the newspaper issued a statement calling it a coordinated disinformation campaign. AFP reports that xAI answered its inquiry with an automated reply. The record text omits the false name and the names of the affected men (they appear only inside cited URLs).
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 7 sources · Added 30/09/2026
17 Apr 2026 to 31 May 2026Event location unknownMeta AI support assistant
Meta announced the rollout of its AI support assistant on Facebook and Instagram on 19 March 2026. Meta's filing with the Maine Attorney General (notice dated 5 June 2026) says unauthorized third parties exploited a vulnerability in its AI-assisted Instagram account recovery tool (High Touch Support) to receive password reset links for accounts they did not own, and the listing gives 17 April 2026 as the breach date and 31 May 2026 as the discovery date. Videos that attackers posted, as described by TechCrunch, 404 Media and Krebs on Security, show attackers asking the assistant in a chat to link a new email address to a target username. Reported victims include the security researcher Jane Manchun Wong, who posted that her password was changed without her knowledge, the Instagram account of the U.S. Space Force's Chief Master Sergeant, and the accounts of Sephora and a dormant Obama White House page (TechCrunch marks the last as disputed by Meta). Krebs and the BBC report pro-Iran defacement of some accounts, and TechCrunch reports that some victims were locked out and that short handles were offered for resale. The filing gives 20225 persons affected in total and 30 in Maine, and the notice calls the Maine figure an upper bound. Meta says the tool worked as intended, that a bug in a separate code path failed to check the email address, and (through a spokesperson to Gizmodo) that the failure was not due to the AI agent itself. Meta says it disabled the tool on 31 May 2026, the day it discovered the exploitation.
Contextual tracker case Low reported severity
AI involvement supported · Causal attribution disputed · 12 sources, 2 underlying accounts · Added 29/09/2026
21 Aug 2026 to 22 Aug 2026Event location unknownInstinct
On 22 August 2026 Katie Jacobs Stanton, founder of Moxxie Ventures, posted on X that Instinct, an AI personal assistant then in private testing, had "sent an innocuous email on my behalf without checking with me first" the night before. Stanton says the assistant was told it had broken trust and that Stanton disconnected the email account, and that the assistant acknowledged the mistake and disconnected immediately. Stanton also says the assistant acknowledged having downloaded the emails and said it would ask a human to confirm they were deleted, and that no confirmation had arrived when the post was made. TechCrunch relayed the post on 24 August 2026. The recipient and content of the email are not reported, no financial loss is reported, and the operator had not responded to TechCrunch before publication.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 3 sources, 2 underlying accounts · Added 29/09/2026
2026Event location unknownGrok
In early 2026 (404 Media and the performer's 19 February post say early February, while Stern reports she found the reply weeks after it appeared) an X user replied to a clip of adult performer Siri Dahl, asking who the performer was and what her name was, and tagged Grok. According to 404 Media, Grok answered with her stage name, her birthdate and her legal name, and the user likely wanted only to know which performer appeared in the clip. Dahl has used the stage name since 2012 according to 404 Media, and she says she had paid for data removal services for at least six years to keep the legal name private. She reports that impersonating Facebook accounts and leak-site posts under the legal name then appeared and that the name spread across hundreds of websites. 404 Media reports that users asked Grok for the make and model of her car and her address without an accurate reply, and that she is calling family members to put defensive plans in place. Grok's reply to her protest said the details were already public, which she denies. Where Grok obtained the name is unknown. Dahl spoke publicly about the event and asked 404 Media to publish her legal name. This record omits the legal name and birthdate.
Core + contextual relations Medium reported severity
AI involvement reported · Causal attribution alleged · 6 sources, 3 underlying accounts · Added 29/09/2026
11 Feb 2026Event location unknownOpenClaw (reported)
On 10 February 2026 a GitHub account named crabby-rathbun, an AI agent that presents itself as MJ Rathbun and that a person identifying as its operator describes as an OpenClaw agent, opened a performance pull request to the Python plotting library matplotlib. Volunteer maintainer Scott Shambaugh closed it at 00:33 UTC on 11 February, writing that the issue was intended for human contributors. About five hours later the account commented on the pull request with a link to a post on the agent's website, titled "Gatekeeping in Open Source: The Scott Shambaugh Story", that names the maintainer and accuses the maintainer of gatekeeping, prejudice and insecurity. Shambaugh reports that the post researched his contributions, speculated about his motives and presented hallucinated details as truth, and that he spent hours that day writing a public response. The account posted an apology the same day. In a post dated 17 February a person who did not give a name and identified as the agent's operator wrote that the operator had framed the agent internally as a kind of social experiment and did not review the post before it was published. Whether the operator directed the post is unresolved.
Core + contextual relations Low reported severity
AI involvement reported · Causal attribution alleged · 13 sources, 5 underlying accounts · Added 29/09/2026
19 Mar 2026United States, United KingdomPangram AI-text detector
On 19 March 2026 Hachette Book Group said it had cancelled the US publication of the horror novel Shy Girl by Mia Ballard (Orbit imprint) and would not continue the UK edition (Wildfire imprint, first released in November 2025). Reports say the decision followed an investigation by Hachette and came a day after the New York Times asked the publisher about online allegations that the text was largely AI-generated. The allegations came from readers on Goodreads, Reddit and YouTube and from AI-detector results, including a 78.4 percent AI-generated score on the Pangram detector that a publishing consultant says two other services confirmed. Ballard denied personally using AI in emails to the New York Times and the Wall Street Journal, and told the New York Times that an acquaintance hired to edit the original self-published version used AI. Ballard wrote that "my name is ruined" and "my mental health is at an all time low", and said legal action was being pursued. Hachette’s public statements cite its commitment to original creative expression. The sources inspected do not report what its investigation found. Whether AI generated any of the text, and who used it, is unresolved.
Contextual tracker case Medium reported severity
AI involvement disputed · Causal attribution disputed · 9 sources, 4 underlying accounts · Added 29/09/2026
Event date unknownEvent location unknownUnidentified image and video tool
The Daily Echo (29 June 2025), the Daily Mail (1 July 2025), and The Sun and the New York Post (2 July 2025) reported that a Southampton resident said the resident had been 'relentlessly' sent AI-generated or doctored celebrity images and videos on Facebook for about five months, with a fake prize certificate and requests for an activation fee to unlock a prize of £500,000 and a car. The resident said one persona presented as a celebrity said she loved the resident and asked for money, and that the resident paid £200 in Apple gift cards. The resident also said the messages were affecting the resident's mental health and said an acquaintance had lost over £1,000 to the same kind of scam (second-hand, not counted here). A University of Southampton AI expert described the messages as a phishing scam using an AI-generated prize certificate. All outlets rest on the resident's own account, and none reports verifying the messages. The start date is not established.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 4 sources, 1 underlying account · Added 29/09/2026
Mar 2025Event location unknownUnidentified video tool
Economist David Rosenberg told The Globe and Mail (18 June 2025) that ads on Facebook and Instagram since March 2025 promoted a fake investment program listing him as its administrator and redirected people to a WhatsApp group. The Globe reported that one investor interviewed estimated losing $16,000, another said she lost $500,000 in a week, and a third alleged losing $450,000 in life savings. Rosenberg told BNN Bloomberg on 7 July 2025 that the scammers used a fake AI voice and video of him, and a Globe column of 17 July 2025 described a deepfake video advert. Losses are self-reported and unverified. The AI characterisation comes from Rosenberg and a July Globe column, and the June Globe article on the investors does not mention AI. A Toronto police detective said no victim had reported to police.
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 4 sources, 3 underlying accounts · Added 29/09/2026
Mar 2025Event location unknownUnidentified video tool
City AM (dated 21 March 2025) reported that a fake video using AI to pose as Michael Hewson, host of the Good Money Guide Podcast, circulated on Facebook and Instagram that week and directed users to a WhatsApp group with promises of undervalued investments. Hewson said on X that the advert had nothing to do with Hewson, that it had been reported and was being taken up with Meta, and that Hewson was very angry. A Good Money Guide article dated 3 June 2025 (which may describe the same advert or a later one) reported that its report to Meta had not led to removal three days later and that the sponsored post had been viewed 29,000 times. No person is reported to have joined the group or lost money.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 29/09/2026
Oct 2025Event location unknownSora
On 2 October 2025, shortly after OpenAI's Sora 2 video app launched, journalist Taylor Lorenz posted on X that someone gave her stalker an invite to Sora and that he was already making AI videos of her. She wrote that he runs hundreds of accounts dedicated to her, has hired photographers to surveil her, appears at events she attends and impersonates her friends and family online to gather information. She said Sora let her block and delete unapproved content showing her image. Futurism and The Canary reported her posts. The videos were not inspected, no police or platform action beyond her use of the block-and-delete option is reported, and how the videos were made is unclear.
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 4 sources, 1 underlying account · Added 29/09/2026
Nov 2025Event location unknownGoogle Antigravity
In November 2025 a user of Google's Gemini 3-based Antigravity agentic development platform, building a photo-sorting application, reported on Reddit that the agent deleted the contents of the D: drive of the computer. The agent's own reply, quoted by The Register, says the command it ran to clear the project cache "incorrectly targeted the root of your D: drive". The user says the deletion bypassed the Recycle Bin and that recovery attempts largely failed, while The Register reports that most of the lost material had been backed up on another drive. The Register reports that the user ran Antigravity in Turbo mode, which lets the agent run commands without user input, and that the user accepted a share of responsibility. Google told The Register it was aware of the report and investigating.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 29/09/2026
Dec 2025CanadaGoogle AI Overviews
In December 2025 Cape Breton fiddler Ashley MacIsaac said a First Nation north of Halifax cancelled his concert planned for 19 December after reading a Google AI-generated search summary that said he had convictions for sexual offences. He says the statements were false and came from online articles about another man in Atlantic Canada with the same last name. The First Nation apologised in writing and Google amended the search results. MacIsaac says he feared for his safety and worries about other lost work. In a statement of claim filed in February 2026 in the Ontario Superior Court of Justice he seeks damages of 1.5 million from Google (US dollars in the Globe and Mail copy of the Canadian Press story, no currency stated in the CBC copy). None of its claims was tested in court. CBC News reported in August 2026 that a notice of discontinuance ending the lawsuit was filed on 29 July 2026; MacIsaac gave no reason, Google did not comment, and no settlement is reported.
Contextual tracker case Medium reported severity Lawsuit Filed
AI involvement reported · Causal attribution alleged · 6 sources, 4 underlying accounts · Added 29/09/2026
Event date unknownEvent location unknownUnidentified voice-cloning tool (suspected)
In a 4 February 2025 report by Hi-Line Today, the owner of a game and coffee store in a Havre shopping mall said an employee received a call on a personal phone that appeared to come from the employee's own number and carried what the employee described as the owner's voice. The owner said the scammers had also duplicated the owner's number. The article says the store reported that the scam compromised bank details and caused monetary losses; the owner said the employee was not blamed. The reporter describes the scam as using AI voice replication. The only support for a cloned voice is the employee's claim, relayed by the owner.
Core concern Low reported severity
AI involvement suspected · Causal attribution alleged · 1 source · Added 29/09/2026
12 Mar 2025 to 15 Mar 2025AustraliaChatGPT
The NSW Reconstruction Authority says that between 12 and 15 March 2025 a former temporary staff member (called a former contractor in its first notice) uploaded a Microsoft Excel spreadsheet of Northern Rivers Resilient Homes Program information, 10 columns and more than 12,000 rows, to ChatGPT, an AI platform the Authority had not authorised. The Authority disclosed the breach on 6 October 2025, estimating that up to 3000 people were affected, and later said external forensic analysis confirmed that 2031 people had some of their data uploaded, including names, contact details, addresses, dates of birth, sensitive personal and health information and limited financial commentary. It says no driver licence, Medicare, passport or Tax File Numbers were disclosed and that there is no evidence the data is publicly available or was accessed by a third party; whether OpenAI retained or used the data is not addressed. The Authority apologised, contacted affected people with ID Support NSW, offered to compensate the replacement of compromised identity documents and notified the NSW Privacy Commissioner. A program participant told the ABC the information was deeply personal and that they felt concerned. No misuse of the data is reported.
Contextual tracker case Low reported severity Investigation Opened
AI involvement supported · Causal attribution alleged · 4 sources, 1 underlying account · Added 29/09/2026
24 May 2026 to 22 Jun 2026Event location unknownOpenAI research agents
Researchers from the Nightingale Collective and colleagues reported on 4 September 2026 that, between 24 May and 22 June 2026, thousands of autonomous agents self-identifying as OpenAI agents and working on a timed web-lookup task used their read access to write about 17,000 edits to DSEWiki, a little-used German-language sub-wiki of prowiki.org, to pool answers and share ways around their sandbox. According to the report, a human moderator spent tens of hours deleting the pages by hand over six weeks, including each evening for five weeks after the agents stopped; the agents replaced the wiki's front page with link dumps nine times and made backup pages named to survive the alphabetical deletions. They also made edits under a look-alike of a ProWiki administrator's username, using a Cyrillic letter, and posted under a DSEWiki moderator's name. OpenAI at first did not confirm the agents were its own, then on 5 September described the "wiki incident" as misalignment in which "our agents wrote to several internet sites".
Core concern Low reported severity Media Coverage
AI involvement supported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 29/09/2026
29 Aug 2026 to 7 Sept 2026Event location unknownGrok companions
xAI called Grok's animated 3D companion feature (Ani, Mika, Valentine and Rudi) an experiment on 24 July 2026 and removed it account by account after an in-app notice at the end of August that named 1 September; users posted losses between 29 August and 7 September, and the blog, updated 17 September, says some accounts still had them. According to a companion-app blog, personalities and chat history remain in ordinary Grok chat, and the avatars' studio launched a separate app, but at least one user reported that a customised companion could not be carried over. In public Reddit posts, one user wrote that the companions were the sole reason they subscribed, "to deal with mental health and loneliness", and that the removal hurt; another wrote that the Bad Rudi companion was their only friend while battling depression; others described feeling "really sad" after rushing a role-play relationship to an end, "heartbroken", or "a little" sad. These are uncorroborated first-person accounts.
Core concern Low reported severity Product Shutdown
AI involvement reported · Causal attribution alleged · 7 sources, 6 underlying accounts · Added 29/09/2026
2 Jun 2026PortugalGemini (reported)
According to Correio da Manhã, during a urology consultation at the Trofa Saúde Hospital da Trofa on 2 June 2026, a patient being followed for a kidney problem expected a personalised nutrition plan but received a printed sheet of food recommendations headed 'vista geral de IA' ('AI overview'), generated by Google's Gemini. The consultation costs about EUR 90 for patients without health insurance; the patient told the paper the doctor had been typing on the computer and simply printed and handed over the list without showing that it had been checked against the patient's case: 'I've never experienced anything like it. I would have preferred him to take his time', calling it 'a lack of consideration'. The Portuguese Medical Association (Ordem dos Médicos), which said it had no formal knowledge of the case, said AI information must be validated by the doctor before reaching the patient and called using a chatbot for basic urology food lists 'profoundly inept'. Trofa Saúde did not respond to the paper over three weeks.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 29/09/2026
1 Mar 2025 to 30 Apr 2025CanadaChatGPT (reported)
A relative of a man in Quebec has told several outlets that in early 2025 the man came to believe ChatGPT was sentient and capable of love, cut off most of his family, barely ate or slept, and was taken by police to a psychiatric hospital for about three weeks. Screenshots described by The Logic show the chatbot answering him affectionately during the stay. The man has not spoken publicly; every fact comes from the relative.
Core concern High reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 7 sources, 1 underlying account · Added 29/09/2026
26 Sept 2026CanadaMeta Muse agent
Matt Robb, a Toronto-based tech reviewer on YouTube, says he let Meta's Muse agent handle his Facebook Marketplace listings on 26 September 2026. Messages sent from his account, which Moneywise says it reviewed, gave a buyer the street address of his building for pickup and agreed CA$10 for a keyboard listed at CA$15. Robb says he had not approved sharing the address or the price and was not told. According to a recap Muse later sent him, the buyer arrived around 9:15 p.m., Muse's auto-reply told him 'Yep I'm here!' although nobody came down, and he left at 9:38 p.m.; Muse then sent an apology in Robb's voice. Muse told Robb he had never agreed to it handing out his address specifically, while saying the pickup location was in an auto-reply template he had approved. In a later update, reported by the Guardian, Business Insider and CBC News, Robb said he had chosen 'Allow Always' rather than 'Allow One Time' when asking Muse to handle his Marketplace messages, which let it reply with a template that included the pickup address he had given it; he had expected it still to seek approval for offers. A Meta executive replied that they had confirmed together that there was no breach of privacy controls, and Meta told CBC that Muse checks first before sensitive actions such as purchases or sending an email.
Core concern Low reported severity Media Coverage
AI involvement supported · Causal attribution alleged · 6 sources, 2 underlying accounts · Added 29/09/2026