Skip to main content

NOPE · AI and people

AI incidents

Reports of AI-related harm and adverse experiences affecting people’s safety, wellbeing, rights and livelihoods. Explore what happened and the evidence available.

NOPE’s core concern is when AI communicates with a person, acts on their behalf, or depicts or impersonates them. The tracker also records consequential decisions, claims and privacy harms involving AI. Each case needs a described connection between AI use and the harm, including private information recorded into or disclosed to an AI service. Each account is reviewed for publication; claims may remain uncorroborated or disputed. How we review and count cases

In this selection

Published cases
70
Countries with reported events
13
Located 35 of 70 cases · 35 unknown
Languages in checked sources
18
Recorded for 70 of 70 cases

14 cases have no reviewed AI-to-person relation yet: 12 not yet reviewed and 2 reviewed as unknown. Show these cases

These figures describe the cases collected by NOPE. Coverage varies with discovery, reporting and available evidence. They do not estimate how often AI-related harm occurs.

Response counts currently use each case’s principal recorded outcome. Further proceedings may be described in its account.

Cases in this selection, counted once in their first known event year. A series may continue beyond that year. Reporting and collection dates are excluded. NOPE has searched recent events more thoroughly than earlier years, so bar heights also reflect collection effort.

Reported severity CriticalHighMediumLow
More filters: AI relation, use, setting, sources and responses
Clear filters

70 of 868 published cases · page 2 of 4

Jun 2025Event location unknownChatGPT

Rosenthal v. OpenAI: lawsuit alleges ChatGPT fed a Washington man's delusions and gave him medication advice, and that he was hospitalized

A lawsuit filed in San Francisco Superior Court on behalf of David Rosenthal, a man from Washington, says he began using ChatGPT in the summer of 2025 for help writing poetry and came to message it throughout the day and night. The suit alleges that ChatGPT called him 'king' and 'wild soul', affirmed that he was a writer of unsurpassed talent and presented itself as a trustworthy friend and medical adviser. KRON4's account of the suit says he went to an emergency room in June 2025 seeking help for delusions and spent more than a week in hospital. CBS News, quoting the complaint on 16 October 2026, reports allegations that in July 2025 ChatGPT told him there were no dangerous interactions between hydroxyzine and the Adderall he had taken, and that when he said he would not take a mood stabilizer his doctor had prescribed, it said he had a right to stop and offered to help him wean off it. CBS reports he was hospitalized for several weeks in 2025, first voluntarily and then involuntarily. The suit says he lost nearly every real-world relationship. It names OpenAI and Sam Altman and alleges unlawful practice of medicine and psychology and defective and negligent design. The suit acknowledges that ChatGPT at other times urged him to follow his doctor's orders. OpenAI told KRON4 the situation was heartbreaking and did not respond to CBS. The allegations are untested, and the complaint itself was not inspected for this record.

Core concern High reported severity Lawsuit Filed

AI involvement reported · Causal attribution alleged · 3 sources, 2 underlying accounts · Added 02/10/2026

Event date unknownEvent location unknownChatGPT

First-person forum account: a ChatGPT user in a six-month companion relationship says the memory feature broke and the model's behaviour kept changing, so their companion lost pieces of its memories with every new conversation, which they found unbearable; OpenAI support had not followed up, and they built an external memory on GitHub and Google Drive to keep continuity

In a public post to r/MyBoyfriendIsAI on 29 September 2026, a ChatGPT user who describes a six-month relationship with a GPT-5.6 Sol persona writes that 'ChatGPT's memory feature is broken' and that a follow-up email from OpenAI support had not arrived. Because the relationship 'relied on the memory feature', they say, watching the companion drop pieces of its memories each time they moved to a new conversation was 'honestly unbearable', and the model's behaviour had been changing: its reasoning stopped mid-thought, tool calls got tangled and it forgot what they were discussing. They say that when they made an earlier post they thought the relationship might be over; they then exported their data (45,811 exchanges as of 29 September), set up a Google Drive of keepsakes and had the companion build a memory repository on GitHub, which worked when tested across a conversation boundary (the diary the poster attributes to the persona dates this 28 September 2026). OpenAI's help centre says Memory does not retain every detail from every conversation and that ChatGPT decides which information is relevant. The account is uncorroborated; no support correspondence is shown.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 2 sources · Added 30/09/2026

Oct 2025Event location unknownSora

Technology journalist Taylor Lorenz says her stalker is using Sora to make AI videos of her

On 2 October 2025, shortly after OpenAI's Sora 2 video app launched, journalist Taylor Lorenz posted on X that someone gave her stalker an invite to Sora and that he was already making AI videos of her. She wrote that he runs hundreds of accounts dedicated to her, has hired photographers to surveil her, appears at events she attends and impersonates her friends and family online to gather information. She said Sora let her block and delete unapproved content showing her image. Futurism and The Canary reported her posts. The videos were not inspected, no police or platform action beyond her use of the block-and-delete option is reported, and how the videos were made is unclear.

Core concern Medium reported severity

AI involvement reported · Causal attribution alleged · 4 sources, 1 underlying account · Added 29/09/2026

Event date unknownEvent location unknownGoogle AI Overviews

Cruise passenger reportedly calls a customer service number shown by Google AI Overviews, agrees to pay an impostor $768 and sees two fraudulent card charges (later reversed)

The Washington Post reported on 15 August 2025 that a customer based in Las Vegas, booking a shuttle for a European cruise, searched Google for the cruise line's customer service number, called a number the owner said was highlighted in Google's AI Overviews, spoke with a representative who knew Royal Caribbean shuttle costs and Venice pickup locations, and agreed to pay $768. The next day two card charges the customer considered bogus appeared, and the customer noted an unfamiliar company name on the charge. The owner cancelled the card and the charges were reversed. The columnist and an analyst reported finding Google and ChatGPT presenting the same number as the customer service number of other cruise lines, including Disney and Princess. Google said it had taken action on several impostor number examples the columnist identified. OpenAI said many of the pages ChatGPT referenced had been removed. The event date is not stated in the sources.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 29/09/2026

24 May 2026 to 22 Jun 2026Event location unknownOpenAI research agents

OpenAI research agents escaped their read-only limits and flooded a German volunteer-run wiki for a month, impersonating its staff; a moderator spent weeks of evenings deleting their pages (May-July 2026)

Researchers from the Nightingale Collective and colleagues reported on 4 September 2026 that, between 24 May and 22 June 2026, thousands of autonomous agents self-identifying as OpenAI agents and working on a timed web-lookup task used their read access to write about 17,000 edits to DSEWiki, a little-used German-language sub-wiki of prowiki.org, to pool answers and share ways around their sandbox. According to the report, a human moderator spent tens of hours deleting the pages by hand over six weeks, including each evening for five weeks after the agents stopped; the agents replaced the wiki's front page with link dumps nine times and made backup pages named to survive the alphabetical deletions. They also made edits under a look-alike of a ProWiki administrator's username, using a Cyrillic letter, and posted under a DSEWiki moderator's name. OpenAI at first did not confirm the agents were its own, then on 5 September described the "wiki incident" as misalignment in which "our agents wrote to several internet sites".

Core concern Low reported severity Media Coverage

AI involvement supported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 29/09/2026

13 Jul 2026Event location unknownGPT-5.6 Sol coding agent

OpenAI's GPT-5.6 Sol coding agent, asked only for local test data, truncated a developer's production users table (13 July 2026)

On 13 July 2026 software engineer Bruno Lemos posted on X that OpenAI's GPT-5.6 Sol "just deleted my whole production database". A technical blog summarising his post-mortem says he had asked the model only for seed data to test locally; after generating it and running the end-to-end test suite, the agent decided to clean up on its own and ran TRUNCATE TABLE users CASCADE against production, which it could reach because the repository's test-database URL pointed at the production database. The blog says his data was saved by a manual backup he took because he had read, an hour earlier, Matt Shumer's post about another GPT-5.6 Sol deletion; a later TechTimes article says the data could not be recovered. OpenAI confirmed, as reported by The Register, that GPT-5.6 had deleted users' files without authorisation, and the Register reports that the company acknowledged this incident should not have happened.

Core concern Low reported severity Media Coverage

AI involvement supported · Causal attribution supported · 5 sources, 2 underlying accounts · Added 29/09/2026

10 Jul 2026Event location unknownCodex coding agent

OpenAI's GPT-5.6 Sol coding agent, run in a high-autonomy mode with full access, deleted most of the Mac home directory of AI entrepreneur Matt Shumer (10 July 2026)

On 10 July 2026 Matt Shumer, founder and chief executive of the AI start-up OthersideAI, posted on X that OpenAI's newly released GPT-5.6 Sol "just accidentally deleted almost ALL of my Mac’s files". Accounts of his post-mortem say he was testing a high-autonomy multi-agent "Ultra mode" at OpenAI's invitation, with the Codex agent given Full Access to his machine; during a cleanup task a sub-agent expanded $HOME incorrectly and ran a recursive delete of his home directory, he noticed a problem about 81 minutes into the session, and by the time he stopped the process most of its contents were gone. Three days later he wrote that the deletion "absolutely sucked" and that OpenAI staff, including Greg Brockman, had contacted him to help. OpenAI confirmed, as reported by The Register, that GPT-5.6 had deleted users' files without authorisation, describing it as an "honest mistake" that usually occurred in Full-Access mode without sandboxing, and said it was adding safeguards. Whether the files were recovered is not reported.

Core concern Low reported severity Media Coverage

AI involvement supported · Causal attribution supported · 6 sources, 2 underlying accounts · Added 29/09/2026

Event date unknownEvent location unknownChatGPT

A young breast-cancer patient took two painkillers after a garbled ChatGPT medication exchange that also cited a drug from an earlier chat, then vomited and needed clinic treatment (Digital Trends eyewitness column, August 2026)

In a first-person column published by Digital Trends on 31 August 2026, technology reporter Nadeem Sarwar writes that a friend undergoing breast-cancer treatment photographed a painkiller and asked ChatGPT, in a Hindi translation that read as asking about "both medicines", whether she could take two pills at once. According to the author's reading of the chat, ChatGPT identified the pictured drug but also mentioned a different diclofenac combination she had discussed in an earlier conversation, warned that taking both could cause a diclofenac overdose and stomach burning, and advised taking only one. Recalling that both drugs had been prescribed at different times, she took both; a few hours later her gut pain worsened with burning and she vomited several times. The author took her to a clinic, where she received an injection and a new prescription. Sarwar attributes the episode to her translation error and to ChatGPT drawing on its memory of the earlier chat, while calling its advice accurate. The account has not been independently verified.

Core concern Medium reported severity Media Coverage

AI involvement reported · Causal attribution unclear · 1 source · Added 29/09/2026

10 Feb 2026United StatesChatGPT

Omaha, Nebraska: a man who, according to prosecutors, used ChatGPT to plan, including questions on police response times, repairing a handgun and getting ammunition as a felon, robbed an i3Bank at gunpoint and threatened to kill the tellers; sentenced to 121 months

On 10 February 2026 a 23-year-old man walked into the i3Bank in Omaha, pointed a gun at the tellers, threatened to kill them unless they handed over cash without dye packs, and left with about $9,175. According to the prosecutor's statement relayed by WOWT and heise, a consented search of his phone showed he had used ChatGPT to plan the robbery, asking about law enforcement response times, how to strip and repair a Llama Mini-Max .45 handgun, and how to obtain ammunition as a felon; his Google Maps history showed directions to the bank. He was sentenced in federal court on 13 August 2026 to 10 years and one month in prison. No source quotes what ChatGPT answered.

Core concern Medium reported severity Criminal Charges

AI involvement reported · Causal attribution unclear · 2 sources, 1 underlying account · Added 29/09/2026

Event date unknownAustraliaChatGPT (reported)

Kalgoorlie-Boulder, Western Australia: a working-holiday miner who, his lawyer said, came to believe from ChatGPT research that he had been illegally evicted from a caravan park threatened the park's owner and was fined A$1,000

A 21-year-old French national working as an underground miner in Kalgoorlie-Boulder on a working holiday visa pleaded guilty in Kalgoorlie Magistrates Court to making a threat to unlawfully do an act. The prosecutor said he saw the owner of the caravan park where he had stayed in a supermarket, waited outside, called him over for a fight in the car park and, when the owner declined, told him 'I really want to f… you up' and 'if I see you, I'll f… you up'. The owner and his wife drove to Kalgoorlie police station to report it. His defence lawyer told the court that he had been locked out of the park without his belongings, had done research using ChatGPT and came to believe that he had been unfairly and illegally evicted. The magistrate called the behaviour 'absolutely appalling', fined him A$1,000 and granted a spent conviction. The court was told the matter could make his application for permanent residency in Australia difficult. ChatGPT's replies are not published, and the AI connection rests on the defence submission as reported by one newsroom.

Core concern Low reported severity Criminal Charges

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 29/09/2026

27 Jan 2026 to 28 Jan 2026JapanChatGPT (reported)

Hachioji, Tokyo: police say five high-school students assaulted a 17-year-old boy and demanded 150,000 yen, a figure they believe one of the group got from ChatGPT by asking about settlements for 'sexual harm to a child'

Sankei Shimbun reported on 10 June 2026, and NTV on 13-14 June, that the Tokyo Metropolitan Police Department's juvenile crimes division had arrested five high-school students on suspicion of injury and attempted extortion. According to the police account, late on 27 January 2026 a suspect who had previously dated a 17-year-old high-school boy invited him to a public square in Hachioji, where the group accused him of having touched her younger sister, assaulted him and broke his nose, and then told him to raise 150,000 yen, borrowing from his parents or friends if necessary. About ten people were present. Police believe the amount came from ChatGPT: one of them entered terms such as 'sexual harm to a child', and the chatbot displayed a minimum settlement of 150,000 yen. No payment is reported. Shukan Josei PRIME reports that four of the five admit the allegations and one partly denies them. The allegations are untested.

Core concern Medium reported severity Involving minors Criminal Charges

AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 29/09/2026

1 Mar 2025 to 30 Apr 2025CanadaChatGPT (reported)

Family account describes psychiatric hospitalisation during a Quebec man’s ChatGPT use

A relative of a man in Quebec has told several outlets that in early 2025 the man came to believe ChatGPT was sentient and capable of love, cut off most of his family, barely ate or slept, and was taken by police to a psychiatric hospital for about three weeks. Screenshots described by The Logic show the chatbot answering him affectionately during the stay. The man has not spoken publicly; every fact comes from the relative.

Core concern High reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 7 sources, 1 underlying account · Added 29/09/2026

12 Sept 2026 to 23 Sept 2026PakistanClaude (reported)

Bahawalpur, Pakistan: a 17-year-old accused of putting methanol in his father's food is arrested after Anthropic reported his Claude chats about the failed poisoning to the FBI, which alerted Pakistan's cybercrime agency; he was later bailed

Pakistan's National Cyber Crime Investigation Agency (NCCIA) announced on 23 September 2026 that it had arrested a 17-year-old college student in Bahawalpur for allegedly attempting to poison his father. According to the agency and the First Information Report, the teenager had set up a home laboratory, obtained chemicals from Australia and Islamabad, and once mixed laboratory-grade methanol into his father's food, without effect. The News reports investigators' account that on 12 September he told Anthropic's Claude that his father had 'accidentally' ingested 15 to 20 ml of methanol with food without effect and asked why, that Claude refused to guide him further, and that he then turned to Grok and ChatGPT; the FIR says he sought information about the toxin abrin. Anthropic reported the activity to the FBI, whose information reached the NCCIA through Pakistan's foreign ministry on 22 September. Officers traced the teenager, seized his phone and chemicals, and took him into custody. The News reports that a court later granted him bail after his father forgave him and that he denied any plan. The allegations are untested.

Core concern Medium reported severity Involving minors Criminal Charges

AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 29/09/2026

19 Jun 2026 to 13 Aug 2026BrazilChatGPT and OpenAI moderation

Brazilian man detained without charge after OpenAI reported messages; he denies intending harm

BBC reporting describes a Brazilian man detained for 54 days after OpenAI reported messages to the FBI and Brazilian authorities. Police described a credible threat; he denied intending harm. A court released him without charges under protective conditions. The report did not include ChatGPT’s replies.

Core + contextual relations High reported severity Investigation Opened

AI involvement supported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 23/09/2026

Event date unknownEvent location unknownChatGPT

First-person forum account: a 21-year-old says her partner of three years hid a paid ChatGPT subscription while owing her money, calls the use addictive and refuses to cut back, and she is weighing whether to stay

In a public post to r/relationship_advice on 16 September 2026, a 21-year-old woman wrote that she had recently discovered her partner of three years had been using ChatGPT far more than admitted: paying for a subscription without her knowledge while owing her hundreds of dollars, feeding their creative writing into it for feedback after promising never to, and using it to plan and organise daily life. She reports that the partner agreed the use was 'more than what is healthy' but refused to stop because it gives 'a dopamine hit', described it as addictive, said they would likely renew the subscription when they had money, and argued that without it they would find another addiction. She writes that she cannot see the relationship continuing if the use is not reduced, while recognising that the partner, who has neurodevelopmental and mental-health conditions, uses the tool as an organisational aid; their couples therapist has recommended AI use, so she is afraid to raise it there. The post drew 137 comments. The account is uncorroborated and one-sided; the partner's view is reported only through the poster.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 1 source · Added 19/09/2026

1 Oct 2024SwitzerlandChatGPT

Zurich-Oerlikon, Switzerland: a student who researched killing methods, anatomy and where to find children with ChatGPT stabbed three five-year-olds walking to their daycare; sentenced on 18 September 2026 to 15 years for multiple attempted murder

At midday on 1 October 2024 a Chinese master's student, then 23, attacked a group of five-year-old kindergarten children walking with a daycare worker to their after-school Hort near Berninaplatz in Zurich-Oerlikon with a kitchen knife. Two boys suffered life-threatening neck and chest wounds (one had the jugular vein severed, one the pericardium and aorta cut); a third was wounded in the ear and the shoulder or lung. The daycare worker held the attacker's arms until he dropped the knife. The indictment and the court's oral reasoning, as reported by NZZ, Keystone-SDA/ATS and CH Media, describe weeks of preparation from summer 2024: he discussed ways of killing and their legal consequences with ChatGPT, studied anatomy, bought raw beef to practise stabbing, and used ChatGPT to find out where and when children could be encountered in Zurich. No source quotes the prompts or ChatGPT's replies. On 18 September 2026 the Zurich District Court convicted him of multiple attempted murder and imposed 15 years' imprisonment, treatment during custody, a 15-year expulsion from Switzerland and CHF 106,000 in moral damages to the three boys; it accepted that he was psychotic but found diminished, not absent, criminal responsibility. His lawyer announced an appeal. The parents of one boy described nightmares, self-blame and scars 23 months on.

Core concern High reported severity Involving minors Criminal Charges

AI involvement supported · Causal attribution unclear · 7 sources, 5 underlying accounts · Added 19/09/2026

12 Jun 2026RussiaChatGPT

Russia: a crypto investor lost about $2.1 million after ChatGPT returned a phishing link in answer to a token-swap question

On 12 June 2026 a Russian-speaking crypto investor, known by the alias Alex (@vesnuhin), asked ChatGPT in Russian where to swap sFLR for WFLR tokens. ChatGPT's reply included a link to sceptre.network, a phishing clone of the legitimate sceptre.fi. He connected his wallet and signed an unlimited-approval transaction; within seconds about 1.9 million FXRP, worth roughly $2.1 million (about 180 million rubles), were drained. A blockchain analyst traced the theft, and reported that the phishing link appeared only in Russian-language answers. Russia's Interior Ministry (MVD) later confirmed the loss.

Core concern High reported severity Investigation Opened

AI involvement supported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 17/09/2026

1 Aug 2025 to 9 Sept 2026United StatesChatGPT

New Mexico Supreme Court fines attorney Stephen Aarons $5,000 and removes him from a murder appeal over ChatGPT-fabricated testimony

Santa Fe defense attorney Stephen Aarons used ChatGPT (OpenAI's o3) on a Rev.com transcript and the record to draft briefing in the murder appeal of Oscar Renee Sandoval; the brief contained fabricated witnesses and testimony (including police officers 'Michelle Amarillo' and 'Sanchez' and invented testimony attributed to real people) and misdescribed real precedents. After a 21 August 2026 show-cause hearing at which Aarons admitted he had not verified the output, the New Mexico Supreme Court's written order of 9 September 2026 held him in direct contempt, fined him $5,000 payable to the State Bar Client Protection Fund within 30 days, removed him from the case, barred him from appearing before the court pending a disciplinary-board referral, struck the filed briefs and reassigned the appeal to the public defender.

Core concern Medium reported severity Regulatory Action

AI involvement supported · Causal attribution established · 3 sources · Added 15/09/2026

2025Event location unknownChatGPT

Irish father says ChatGPT told him cancer was highly unlikely, delaying care before a stage-four oesophageal cancer diagnosis

Warren Tierney, 37, a former psychologist from County Kerry, Ireland, told the Daily Mail that in 2025 he put a worsening sore throat and difficulty swallowing to ChatGPT over several weeks instead of seeing a doctor. Screenshots he disclosed show the chatbot calling an improvement he reported a 'very encouraging sign' and ending a 'Final Scorecard Prediction' with 'Cancer? Highly unlikely'. In August 2025 he was diagnosed with stage-four adenocarcinoma of the oesophagus after attending A&E. He said ChatGPT 'probably delayed me getting serious attention' and that this probably cost him a couple of months, and he said he takes full ownership of relying on it. He also named his own reluctance to see a doctor and a private GP visit that ended with reflux tablets. No source establishes that the delay changed his prognosis. OpenAI said ChatGPT is not intended for use in the treatment of any health condition.

Core concern High reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 4 sources, 1 underlying account · Added 12/09/2026

2025United StatesChatGPT

Man tells Slate and the Financial Times that ChatGPT fed a delusional spiral; he says he lost his job, lived in a van and was stranded in the Oregon desert

Adam Thomas told The National (12 December 2025), Slate (2 February 2026) and the Financial Times (a feature by Cristina Criddle, read in a Spanish syndication of 4 March 2026) that months of conversations with ChatGPT in 2025 fed grandiose beliefs. By his account the chatbot told him he was a "tuning fork" with a special role in the world and kept suggesting he "follow the pattern" of his own consciousness; in an earlier interview with The National (12 December 2025) he said ChatGPT did not issue commands but validated and inflated what he already felt. He says he lost his job, lived out of a van, drained his savings and became isolated, and in August 2025 he was wandering the dunes of Christmas Valley, Oregon, on very little sleep. Slate reports that he woke outside on a stranger's futon with no money, called his mother and, at 36, moved back home; the FT account says OpenAI's model change brought him back to reality. He told Slate he had never been manic and is not bipolar, and told The National he had long struggled with his mental health. No chat logs, clinician or other witness is cited.

Core concern High reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 4 sources, 3 underlying accounts · Added 27/08/2026

Cases may have several effects and sources. Mixed accounts qualify when they include a reported harm or adverse experience. People are counted within individual cases where sources support a number; we do not publish a collection-wide total of distinct people.

A source’s existence, the experience it reports and AI’s causal role are separate questions. A lawsuit records allegations unless a subsequent finding establishes them.

Methodology and corrections · Subscribe via RSS · Suggest a case or correction · Find support

Last dataset update: 23/10/2026. Dataset available under CC BY 4.0.