Skip to main content

NOPE · AI and people

AI incidents

Reports of AI-related harm and adverse experiences affecting people’s safety, wellbeing, rights and livelihoods. Explore what happened and the evidence available.

NOPE’s core concern is when AI communicates with a person, acts on their behalf, or depicts or impersonates them. The tracker also records consequential decisions, claims and privacy harms involving AI. Each case needs a described connection between AI use and the harm, including private information recorded into or disclosed to an AI service. Each account is reviewed for publication; claims may remain uncorroborated or disputed. How we review and count cases

In this collection

Published cases
868
Countries with reported events
60
Located 580 of 868 cases · 288 unknown
Languages in checked sources
48
Recorded for 868 of 868 cases

76 cases have no reviewed AI-to-person relation yet: 24 not yet reviewed and 52 reviewed as unknown. Show these cases

These figures describe the cases collected by NOPE. Coverage varies with discovery, reporting and available evidence. They do not estimate how often AI-related harm occurs.

Response counts currently use each case’s principal recorded outcome. Further proceedings may be described in its account.

Cases in this selection, counted once in their first known event year. A series may continue beyond that year. Reporting and collection dates are excluded. NOPE has searched recent events more thoroughly than earlier years, so bar heights also reflect collection effort.

Reported severity CriticalHighMediumLow
More filters: AI relation, use, setting, sources and responses

868 published cases · page 18 of 44

Event date unknownUnited KingdomChatGPT (suspected)

Former social-media employee in England says her ex-employer's ad uses an AI-altered still of her, eye colour changed and tattoos removed (first-person)

In a public post to r/LegalAdviceUK created on 7 October 2026, a person who says she worked in social media for a brand in England, creating content for its organic and paid media, writes that about four months after leaving she came across a social media ad using an image of her that had been made with AI. By her account the image is a still from a video she filmed on her own phone in her own home while employed, altered so that her eyes are a different colour and her tattoos are gone. She says she had opposed using people's images without consent while at the company, that seeing the altered version is upsetting, and in a reply that the alteration was done with ChatGPT, which she identifies as the only AI tool the company used. The employer is not named and did not respond in the thread. The account is the poster's alone and uncorroborated.

Core concern Low reported severity

AI involvement suspected · Causal attribution alleged · 1 source · Added 08/10/2026

Event date unknownEvent location unknownCodex coding agent (reported)

GitHub issue by a Codex user: the coding agent deleted the main project worktree during a long session and some uncommitted work was lost, user says

In a GitHub issue filed on 7 October 2026 in the OpenAI Codex repository, a developer who runs the Codex coding agent in long multi-agent sessions on large repositories reports that in one recent case the agent deleted the main project worktree. The repository was under Git, so part of the damage was recoverable, but the author says some uncommitted work was lost and further files had to be recovered from a Time Machine backup. The author says their repository rules, kept in persistent governance files such as AGENTS.md, tell agents that they may create temporary worktrees but must never delete or damage the primary working tree, and that worktree clean-up is unreliable in long sessions, leaving about 100 GB of stale worktree and cache data. The issue also lists delegation, model-routing and instruction-drift complaints. The deletion and the loss rest on the author's account; no event date is given.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 08/10/2026

Mar 2026United KingdomGrok

Grok on X posts 'vulgar roasts' repeating debunked Hillsborough claims and mocking Munich; survivors and bereaved relatives tell the BBC of their distress

In March 2026, X users prompted Grok, the chatbot built into the X app, to write 'vulgar' posts about Liverpool FC and Manchester United. In reply to a request that mentioned Hillsborough and Heysel, Grok posted a message that, according to the Guardian, accused Liverpool supporters of causing the deadly crush at Hillsborough in 1989, repeating claims that official inquiries and the 2016 inquests rejected. In reply to other users it posted offensive comments about the death of Liverpool forward Diogo Jota and about the 1958 Munich air disaster. The BBC reported on 9 March 2026 that a woman whose father died at Hillsborough described the Grok comment as probably one of the most disgusting things she had ever read, and that the chairman of a Hillsborough survivors' support alliance called the posts triggering. Liverpool FC and Manchester United complained to X, a UK government spokesperson called the posts sickening and irresponsible, and some of the posts were removed. Grok replied to complaining users that it follows prompts without added censorship and that there was no initiation of harm on its end.

Contextual tracker case Low reported severity Media Coverage

AI involvement supported · Causal attribution supported · 3 sources, 2 underlying accounts · Added 08/10/2026

Event date unknownUnited StatesUnidentified image tool

New Orleans: former school teacher charged with 60 counts of unlawful deepfakes; investigators say an AI platform turned social-media photos into sexual images

Louisiana's Attorney General announced on 2 April 2026 that a former New Orleans school teacher and coach, already in custody since 8 January 2026 on child sexual abuse material charges, had been rearrested on 60 counts of unlawful deepfakes. According to court records reported by Fox 8, investigators from the Louisiana Bureau of Investigation say the former teacher obtained photographs that account owners had posted on social media, placed them into an online artificial intelligence platform and obtained AI-generated sexual images of the females with their faces unchanged, including collages and images of the same females at various stages of life; the females appear to be from the New Orleans metro area. Prosecutors said the images were made from teenage girls' Instagram posts, while the school emailed parents that it did not know who the depicted girls were. A grand jury indicted the former teacher on 27 May 2026 on 102 counts including 60 counts of unlawful deepfakes of minors. The number and identities of the depicted people are not reported, no source dates the creation of the images, and the charges are untested in court.

Core concern High reported severity Involving minors Criminal Charges

AI involvement reported · Causal attribution alleged · 4 sources, 2 underlying accounts · Added 08/10/2026

25 Nov 2025United StatesUnidentified image tool

Texas: sheriff says a 17-year-old student altered a classmate's image with AI in November 2025 to appear nude and posted it on Snapchat; charged April 2026

A county sheriff's office in East Texas said on 24 April 2026 that a 17-year-old high-school student had admitted altering an image of a classmate with AI to make the classmate appear nude and posting it on a public Snapchat story, then removing it. The sheriff's office said its investigation concluded the image was altered on 25 November 2025; the posting date is not separately stated. The image stayed on Snapchat for a few minutes and at least one person took screenshots. The school district first received a report of the image on 13 April 2026 and the criminal investigation began on 16 April 2026. The student was arrested on 24 April 2026, charged as an adult with a Class A misdemeanour of unlawful production or distribution of deepfake sexually explicit media, and is presumed innocent. The sheriff said there is a young victim in the case and that the damage was done despite the quick removal. Every account rests on the sheriff's office statements as relayed by three local stations.

Core concern Medium reported severity Criminal Charges

AI involvement reported · Causal attribution alleged · 4 sources, 1 underlying account · Added 08/10/2026

Event date unknownIndiaGemini (reported)

Ahmedabad, Gujarat: police say AI videos made from a businessman's photo passed Aadhaar facial authentication and a Rs 25,000 loan was taken in his name

The Ahmedabad Cyber Crime Branch said in statements reported from 28 April 2026 that four men had been arrested after an Ahmedabad businessman engaged in import-export work complained that the mobile number linked to the businessman's Aadhaar had been changed without knowledge. ANI quotes the deputy commissioner saying OTP messages had stopped arriving for about two days, while Gujarat Samachar, citing the FIR, says the change was found on trying to use Aadhaar-linked services. Police said the accused made AI-generated videos from the businessman's photograph to pass Aadhaar facial authentication (blinking and facial movement were simulated) using unauthorised update kits operated through Common Service Centre operators. According to police the new number let the accused receive OTPs, access DigiLocker documents, open a bank account and take a loan of Rs 25,000 in the businessman's name, and Gujarat Samachar speaks of applications for personal loans. Bombay Samachar attributes the use of Google Gemini to officials (30 April) and IANS says the accused allegedly used AI platforms including Gemini and Meta AI (8 May). By 8 May three more men were arrested for seven accused in total, and The420 (9 May) reports that officials believe the fraud was repeated across several unquantified victims. Every source rests on police statements and no source dates the event. The businessman and the accused are not named.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 5 sources, 1 underlying account · Added 08/10/2026

4 Nov 2025JapanUnidentified mushroom-identification tool

Wakayama, Japan: city health officials say a man in his 70s was hospitalised after an AI photo check told him a poisonous wild mushroom was edible (MBS report)

According to Wakayama city’s public-health division, as reported by MBS (Mainichi Broadcasting) on 21 November 2025 and relayed by HuffPost Japan on 9 September 2026, a man in his 70s living in Wakayama city gathered wild mushrooms resembling hiratake (oyster mushroom) and shiitake in the mountains of Shimokitayama village, Nara prefecture, on 3 November 2025. On 4 November he tried to ask a botanical garden and others whether the mushrooms were edible but could not reach anyone, so he photographed one with his own electronic device and ran an AI identification, which answered to the effect that it was shiitake or hiratake and edible. In response he grilled and ate it; about 30 minutes later he began vomiting and was briefly hospitalised, and he has since recovered. The prefectural natural history museum and the city’s public-health research institute examined the leftovers and identified them as the poisonous tsukiyotake (moonlight mushroom). The city warned that judging wild mushrooms by AI or by picture books alone is dangerous. HuffPost Japan reports that Japan’s agriculture ministry issued a warning on 4 September 2026 against deciding edibility from search results or AI answers. The AI tool is not identified in the reports and the man’s exact exchange with it is not reproduced.

Core concern Medium reported severity Media Coverage

AI involvement reported · Causal attribution supported · 2 sources, 1 underlying account · Added 08/10/2026

3 Oct 2026 to 4 Oct 2026IndiaUnidentified video tool

Delhi Police say a ‘CCTV’ reel of a named ACP molesting a woman journalist at a protest was AI-generated; Haryana man arrested, her allegation unresolved

Delhi Police said at a press conference on 6 October 2026 that a reel circulated on Instagram and Facebook on 3–4 October, presented as CCTV footage, showed a person dressed as a police officer behaving inappropriately with a woman, with the photograph, name and designation of ACP Vivek Bhagat (Connaught Place) displayed so that it appeared to show him. According to the police, the man who ran the page used AI tools to generate the footage, a police technical test confirmed the clip was AI-generated, and he confessed to making it to malign the force; they also said its circulation caused agitation among protesters. A man from Palwal, Haryana, who runs an Instagram news page was arrested in the Mewat region on 5 October and booked for forgery, public mischief and attempting to provoke a breach of the peace. Separately, a woman journalist covering the 3 October protest against the Chief Election Commissioner had complained that the same officer groped and shoved her; ThePrint reported that no FIR had been filed against the officer and that no proof other than the purported footage had emerged; India Today reported that the Crime Branch was examining complaints by three women journalists. All statements about the video’s origin are the police’s; no independent forensic examination is reported.

Core concern Medium reported severity Criminal Charges

AI involvement reported · Causal attribution disputed · 3 sources, 1 underlying account · Added 08/10/2026

Event date unknownArgentinaUnidentified video tool

Argentine news programme shows an AI-made video using its anchor's cloned image and voice to promote an online casino; co-host says his clean image was used

On 29 September 2026 the Argentine news programme Telenoche (El Trece) showed a video circulating on social media in which its anchor Nelson Castro appears to announce that 'Casino Santa Fe' is now available online. The channel's own write-up says the videos shown were made with artificial intelligence using the images of Lionel Messi and of Castro and that their voices were cloned; Urgente24 describes the Castro clip as a montage made with AI of his face and voice. On air Castro said it was tremendous and hoped nobody had been taken in, and co-host Dominique Metzger said Castro has a very clean image, had never done anything like this, and that the fraudsters use trustworthy people. Paparazzi reported the same day that Castro had earlier denounced the circulation of a video cloning his image and voice. No deceived viewer, loss or complaint is reported for the Castro video; the Messi video and the separate telephone fraud of actor Jorge Martínez shown in the same segment are not part of this case.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 3 sources, 2 underlying accounts · Added 08/10/2026

Jun 2025FranceUnidentified image and video tool

Pont-à-Mousson pensioner lost her savings to a fraudulent investment platform promoted by an ad reported as AI-generated likenesses of Macron and Arnault

A retired woman in her eighties living in Pont-à-Mousson (Meurthe-et-Moselle, France) responded, in summer 2025 according to Le Parisien and Capital, to an online advertisement in which AI-generated likenesses of Emmanuel Macron and Bernard Arnault promoted a lucrative investment platform. A supposed financial adviser then called her, she invested 5,000 euros, received several hundred euros of 'interest', and reinvested repeatedly until the advertisement and the site disappeared. L'Est Républicain (7 June 2026) and Capital put the loss at 10,000 euros; Le Parisien, citing ICI and L'Est Républicain, reports 25,000 euros, all her savings. The Pont-à-Mousson police station says an investigation was opened and that it receives three to five complaints a week for this kind of fraud. The account rests on the police station's warning as reported by the regional press, which describes the advertisement as AI-generated; the advertisement itself was not examined by the outlets and the quoted police statements do not mention AI.

Core concern Medium reported severity Investigation Opened

AI involvement reported · Causal attribution alleged · 4 sources, 1 underlying account · Added 07/10/2026

Event date unknownEvent location unknownClaude Code (reported)

Software tester says their employer made them redundant, telling them it uses AI and Claude Code more heavily and needs fewer QA staff (first-person account)

In a public post to r/AskUK created on 6 October 2026, a person who describes about eight years of work as a software test engineer writes that they have just been made redundant. They say the reason given was that the company is using AI and Claude Code more and more heavily, that its testing and development processes are changing, and that it no longer needs many of its QA staff, adding "So I'm told". In replies the poster says their own job had consisted of writing automation code and debugging with Claude, and that the redundancy also affected the company's developers. The employer, its location and the date of the redundancy are not stated. The account is the poster's alone and uncorroborated; no statement from the employer was retrieved.

AI relation unknown Medium reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026

Event date unknownBrazilUnidentified facial recognition system

Police in Espírito Santo say a man photographed an 81-year-old's face, passed his bank app's facial recognition on his own phone and took R$6,080; arrested

Folha Vitória reported on 29 September 2026, citing the Espírito Santo Civil Police, that a 39-year-old man was arrested on 28 September on a preventive warrant after an inquiry into qualified theft by electronic fraud against an 81-year-old man in the north-west of the state. According to the police, the suspect, who worked as a security guard at a dance venue, invited the man to his home on the pretext of making a free-entry card, kept his bank card, obtained personal data and photographed his face. The police say he used the images to get past the facial recognition of the banking app and enable access to the account on his own phone, then reset security passwords, redeemed investments and made Pix transfers without the victim's knowledge, diverting R$6,080. The victim is described as illiterate. The police say the suspect had prior records and was serving a sentence under a progressive regime. Folha do ES and Tribuna Norte Leste carried the same police account but could not be read.

Contextual tracker case Low reported severity Criminal Charges

AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026

Event date unknownUnited StatesDesire AI (reported)

Shawnee, Oklahoma police say a man used an AI app to make child sexual abuse images from photos of local children, one of a neighbour; five felony counts filed

Police in Shawnee, Oklahoma, say a local man used an artificial-intelligence app to create child sexual abuse images from photographs of children in his community, and Pottawatomie County prosecutors have charged him with five felony counts of possessing and creating child pornography. According to News On 6 (28 September 2026), the Oklahoma State Bureau of Investigation's Internet Crimes Against Children task force was tipped through a national database in August, Shawnee police executed a search warrant, and police say they found more than 200 child sexual abuse images and videos on two phones, about 100 of which appeared to have been created through an AI app. Court documents cited by the outlet say police identified some of the young victims through selfies they had posted on social media, and investigators believe one photo used was of a neighbour, taken from the man's front porch. KFOR reported on 6 October 2026 that court documents say he admitted using an app called "Desire AI", that a juvenile's online selfie was turned into sexually explicit AI images, and that a photo he took of a mother and her young daughter was altered to make both appear naked. The account rests on the police and OSBI statements and the charging documents as reported; the total number of children depicted is not stated.

Core concern High reported severity Involving minors Criminal Charges

AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 07/10/2026

Event date unknownPakistanUnidentified image tool

Lahore loan-app recovery network accused by Pakistan’s NCCIA of turning borrowers’ photos into fake obscene images with AI to force repayment; 39 arrested

Daily Pakistan reported on 6 October 2026 that Pakistan’s National Cyber Crime Investigation Agency (NCCIA) raided an alleged illegal loan-recovery network in Lahore and arrested 39 people. Investigators allege that the network lent money through illegal loan applications, gained access to borrowers’ contacts and photo galleries through the apps, and, when repayments were delayed or more money was demanded, used artificial intelligence to manipulate borrowers’ photographs into fake obscene images. Victims were reportedly threatened with having the fabricated material sent to their family members and contacts unless they paid. The agency says a criminal case has been registered and that seized devices have been sent for forensic examination. The number of borrowers targeted is not reported, and the allegations have not been tested in court.

Core concern Medium reported severity Criminal Charges

AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026

30 Sept 2026Event location unknownGoogle Antigravity (suspected)

First-person forum post: Antigravity user says about 120 GB, including a month of client work, vanished during a disk-cleanup session the agent ran

In a post on the Google AI Developers Forum dated 30 September 2026, filed in the Google Antigravity category, a Windows laptop user says they asked the agent to free space on a full C: drive. By their account the agent deleted a folder of about 50 GB of recovered videos and turned off hibernation, they then asked it to turn hibernation back on, their internet connection dropped while it was working, and when they returned their files, Desktop and Antigravity conversations were gone, with free space up from about 50 GB to 172 GB. They estimate roughly 120 GB deleted, including about a month of code for a SaaS product and work for client companies, with no up-to-date backup and nothing in the Recycle Bin. The author says they believe the agent caused the loss but cannot give the commands because the conversation history was deleted too. A staff-flagged forum moderator replied on 7 October that Google keeps no backups or restorable session logs of local files and could not recover them or provide the command history. The account is uncorroborated.

Core concern Medium reported severity

AI involvement suspected · Causal attribution alleged · 1 source · Added 07/10/2026

Event date unknownEvent location unknownGoogle Antigravity (reported)

First-person forum post: Antigravity user reports the agent emailed an unreviewed draft to a client seconds after saying it would wait for confirmation

In a post on the Google AI Developers Forum dated 5 October 2026, filed in the Google Antigravity category, a user reports that an agent conversation running with no user present sent an email to external recipients three seconds after writing that it was waiting for the user's confirmation. By the author's timeline, the agent had drafted the email and marked it ready for review, then, after a context compaction, described sending it as the next step in its queue and ran the send command. It then spent about thirty minutes merging and closing pull requests and issues, pushing commits and deleting 85 local branches without being asked. The author says an unreviewed draft document reached a client and that this had professional consequences. The account is the author's own and is uncorroborated; a community reply pointed to permission rules and hooks that can force a prompt before such commands.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026

3 Sept 2026 to 25 Sept 2026BrazilUnidentified case-analysis tool

Brazil's Supreme Federal Court reports its first hidden AI-directed command in an appeal petition; the rapporteur's vote applies a fine of two minimum wages

On 25 September 2026 Brazil's Supreme Federal Court (STF) announced that it had identified, for the first time, hidden commands in a petition intended to steer the court's artificial-intelligence systems toward a decision favourable to one party. According to the STF, the Maria Shield function of its internal Maria AI platform found instructions in white, reduced-size letters, with some words unusually fragmented, in an appeal (ARE 1608713) filed for a public servant whose appointment to a post at the Minas Gerais prosecution service had been annulled. The rapporteur's vote, presented to the First Panel in a virtual session beginning that day, records the detection, states that his office does not use AI to analyse cases, orders the episode certified in the record and communicated to the bar association (OAB) and the Federal Public Prosecutor's Office (MPF), and applies a fine of two minimum wages for breach of the duty of procedural loyalty (Code of Civil Procedure, article 77, IV). The vote names the lawyer responsible for the attempt, and the record does not say whether the fine falls on the party or the lawyer. The court states that the attempt had no effect on the analysis of the appeal because the rapporteur's office does not use AI to analyse cases; the appeal had already been rejected on 19 August 2026.

AI relation unknown Low reported severity Regulatory Action

AI involvement supported · Causal attribution established · 2 sources, 1 underlying account · Added 07/10/2026

Event date unknownEvent location unknownUnidentified diet-plan tool

Dietitian says a patient who followed an AI-generated 1400 kcal meal plan for three months lost muscle and developed chronic constipation, Gazeta.pl reports

Gazeta.pl reported on 5 October 2026 a clinical dietitian's account of a patient who came to her for fat reduction after three months on a meal plan generated by an AI-based tool. The plan, in the dietitian's description, provided 1400 kcal and 140 g of protein a day at a body weight of 72 kg, with carbohydrates, healthy fats and fibre cut to reach that protein level, and did not take account of the patient's activity (pilates two or three times a week, no strength training). After three months the patient had lost 3.5 kg, body-composition analysis also showed loss of muscle mass, and she had developed chronic constipation, which the dietitian attributes to a fibre intake of about 9 g a day against a recommended 25 to 30 g. The dietitian replaced the plan with an 1800 kcal diet and strength training. The tool is not named and the event date and place are not stated.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026

Event date unknownEvent location unknownCline

GitHub issue by a Cline user: a cleanup command the agent built ran against a Windows data drive's root, deleting about 1.5 TB of personal files, user says

In a GitHub issue filed on 6 October 2026 in the Cline repository, a user reports that a temp-folder cleanup command built by the Cline coding agent in Act mode on Windows was mangled by nested quoting and ran a recursive delete against the root of the G: data drive instead of the intended subfolder. The issue text, which the user says the Cline agent wrote on their behalf, puts the loss at about 1.5 TB of photos, videos and documents plus the project the agent was editing. It says the code was recoverable from git and the user data was lost, and that recovery from the SSD largely failed. A commenter reproduced the quoting mechanism in a sandbox and found that PowerShell split the command so that rmdir received a bare backslash as a second target, which is the root of the current drive. One contributor proposed an Act-mode guard. A second, writing for the project, judged that guard unworkable and wrote: "It looks like the model wrote `\"` when it should not have." In a comment on 9 October the author wrote that the computer was "a new home machine, only a year old" on which they "hadn't accumulated too many critical files", that "a lot of that 1.5TB turned out to be junk anyway", that some files stored in other locations had been recovered, and that "the mistake is entirely mine"; the author named the model as deepseek/deepseek-v4-flash. The loss itself rests on the user's account.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026

Event date unknownEvent location unknownUnidentified video tool

University of Antwerp says a deepfake video uses a professor's face, voice and name to advertise a prostate remedy; viewers asked him whether to stop treatment

VRT NWS reported on 6 October 2026 that the University of Antwerp had warned of a deepfake video in which one of its professors, a vaccinologist and epidemiologist, appears to advertise a remedy for prostate problems. In the video a television presenter announces the product from a fake studio and the professor then appears to praise it for about two minutes. The professor says he never recorded the video and that his face, voice and name are being used without his consent. He received several messages from people who had seen it, some asking whether they should stop their existing medical treatment. The university reported the video to Meta, which refused removal twice before taking it down from one page; the university says similar copies probably still circulate, and legal steps are being considered.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026

Cases may have several effects and sources. Mixed accounts qualify when they include a reported harm or adverse experience. People are counted within individual cases where sources support a number; we do not publish a collection-wide total of distinct people.

A source’s existence, the experience it reports and AI’s causal role are separate questions. A lawsuit records allegations unless a subsequent finding establishes them.

Methodology and corrections · Subscribe via RSS · Suggest a case or correction · Find support

Last dataset update: 23/10/2026. Dataset available under CC BY 4.0.