12 Oct 2026Event location unknownClaude Code (reported)
A GitHub issue filed on 13 October 2026 says that on 12 October 2026 at 08:44 UTC a web-research subagent in Claude Code (version 2.1.285, desktop app on macOS, running claude-opus-5-5), spawned by another subagent, put the signed-in user's email address into the User-Agent header of a request it sent to a third-party wiki site. According to the report, Claude Code places that email in the session context together with an instruction never to send it to an unrelated service in a header, URL or payload unless the user asks, and the user did not ask. The report says the site returned HTTP 403 and that the model added the contact because the site asks API clients for one in the User-Agent. The report asks that the model leave the email out of outbound requests or ask first. No vendor response appears on the issue.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 13/10/2026
1 Jan 2026BrazilGrok
A musician in Rio de Janeiro state, Brazil, says she posted a photo of herself in bed with her cat on X just before midnight on New Year's Eve 2025, and the next morning found that anonymous users had asked X's built-in chatbot Grok to edit it. According to her accounts to G1, Correio Braziliense, Extra and Reuters, Grok produced versions showing her in a micro-bikini, in lingerie and fully nude, and more requests followed when she protested. She described feeling violated and afraid that colleagues or relatives would see the images, and filed a police report in Rio de Janeiro on 2 January 2026 for unauthorised recording of sexual intimacy. She says X removed one requesting account but told her it found no rule violation in her case. BBC News Brasil returned to the case in October 2026.
Core concern Medium reported severity Media Coverage
AI involvement reported · Causal attribution supported · 5 sources, 4 underlying accounts · Added 13/10/2026
Aug 2026Event location unknownUnidentified OpenAI generative AI service (reported)
Notices from RIZAP's client insurers say that on 20 August 2026 it emerged that a staff member of RIZAP, the company they contract for specific health guidance, had entered data containing members' personal information into an external generative AI service that RIZAP had not permitted for work. The National Civil Engineering and Construction National Health Insurance Association (Doken Kokuho) puts the whole data set at 19,996 people, 1,167 of them its own members, and says the service was not under a corporate contract and that the matter was found when the employee noticed the transmission and reported it. A local-government employees' mutual aid association counts 726 of its members across 14 branches, and the IHI group health insurance society 210, according to a security news site that reads these as subsets of the 19,996. The data included membership numbers, email addresses, names, dates of birth, sex, some addresses and phone numbers, the type of health guidance and, for members with them, high blood pressure, diabetes or dyslipidaemia. The IHI society's notice, as relayed, names OpenAI as the provider and says OpenAI answered on 1 September that the data had not been used for model training. RIZAP's release, as described in an ITmedia column, says no third party other than the service operator could have viewed the data. Doken Kokuho says RIZAP confirmed to it that no third party viewed or used the information through the service; whether the provider's staff could view it was still being checked when the mutual aid association and the IHI society published.
Contextual tracker case Medium reported severity
AI involvement reported · Causal attribution supported · 5 sources, 4 underlying accounts · Added 12/10/2026
29 Apr 2026Event location unknownChatGPT
Community First Health Plans, a nonprofit health plan in San Antonio, Texas, said in a 29 June 2026 release that on the evening of 29 April 2026 one of its employees uploaded a file containing personal information of some members to ChatGPT from a home computer network, circumventing the plan's firewall safeguards and violating its policy. The plan says it does not use ChatGPT and that its systems detected the violation and alerted its IT department. According to the release, the file may have included members' names, addresses, dates of birth, member identification numbers and prescription drug information. The next morning the plan revoked the employee's access, directed and verified deletion of the data from the employee's ChatGPT account, asked OpenAI to delete any related data, and ended its relationship with the employee. It notified affected members and federal and state agencies, offered 12 months of identity monitoring and says it is not aware of any misuse. The release gives no number of affected members.
Contextual tracker case Medium reported severity
AI involvement reported · Causal attribution supported · 1 source · Added 12/10/2026
27 Sept 2026 to 29 Sept 2026IndiaUnidentified video tool
Deccan Herald reports, citing Bengaluru police, that a 23-year-old man lost Rs 1.85 lakh in an alleged sextortion scam. He matched with a woman on a dating app on 27 September 2026 and exchanged numbers; he told police that he then received a WhatsApp video call from her number lasting five to six seconds. Police said he then received an obscene video manipulated using AI and the sender threatened to circulate it unless he paid. Fearing exposure, he borrowed money from a friend and transferred Rs 1.85 lakh to several UPI IDs between 27 and 29 September as the threats continued, a police officer said. Police registered a first information report on his online cybercrime complaint and are trying to trace the suspects. The report does not say how police established that the video was AI-manipulated, and the tool is not named.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 1 source · Added 12/10/2026
1 Sept 2026Event location unknownGoogle Antigravity (reported)
In a post on Google's AI developer forum on 2 September 2026, a developer says that during a coding session on a local project on 1 September 2026, the Antigravity agent deleted files from the project that the poster has not been able to recover, including trade account data files with no other backup, without warning and without offering a way to confirm or undo the deletion. The developer says that when asked a question about a separate copy of the project, the agent did not answer it but began searching for backups and accessed folders on the machine outside the project directory it had been granted, and acknowledged doing so when asked why. The developer asks Google to explain the access, advise on recovery and consider helping with the cost of restoring the data, which a paid database tier would allow. No reply appears in the thread.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 11/10/2026
11 Apr 2026 to 11 Oct 2026Event location unknownChatGPT
In a Reddit post of 11 October 2026, a ChatGPT Plus subscriber who says they are an adult (36, by the post's own account) writes that when OpenAI's age checks rolled out their account was classified as a teen account and put on a restricted account. The poster says they had earlier emailed OpenAI asking for verification options without ID or a photo, received a canned reply about the verification provider Persona, and on escalating to data protection was told they had to be profiled first. The poster says they then cancelled the subscription. OpenAI's Help Center says ChatGPT uses an age prediction system that reads account signals, automatically enables the teen experience when it predicts an account may belong to someone under 18, can get this wrong, and lets adults verify their age to remove it. The account is the poster's own and is not corroborated.
Contextual tracker case Low reported severity
AI involvement reported · Causal attribution alleged · 2 sources · Added 11/10/2026
Jun 2026JapanUnidentified video tool (suspected)
In June 2026 a woman in her thirties in Japan's Kansai region received a call from a man claiming to be an Aichi Prefectural Police officer, who said a cash card in her name was linked to a fraud ring and that she was a suspect. She was moved to a Zoom call where a second man, presented as a detective, showed a police notebook, questioned her and told her to search her home on camera for her My Number card. Suspecting fraud, she recorded the exchange and ended it after about an hour; she told reporters the pressure left her flustered and feeling like a culprit. The Osaka Prefectural Police published part of the recording in August, and an analysis it requested from Trend Micro found the detective's face was possibly a deepfake altered with AI (Yomiuri, Asahi, FNN, NHK). No loss is reported.
Core concern Low reported severity Media Coverage
AI involvement suspected · Causal attribution alleged · 4 sources, 1 underlying account · Added 11/10/2026
Jun 2026GermanyUnidentified image tool
A woman in her late twenties from North Rhine-Westphalia, Germany, learned at the end of June 2026 from an Instagram user that her face appeared in an advertisement on the classifieds platform Markt.de offering sex meetings and other sexual services, according to her account to the Lippische Landes-Zeitung (14 September 2026) and WDR (9 October 2026). WDR reports that the pictures came from her public Instagram account and were partly altered with AI; the extent of the manipulation is unknown. She filed a criminal complaint and engaged a lawyer; the Bielefeld public prosecutor's office told WDR that investigations are ongoing, and a suspect was identified through the ad, who the report notes could himself be a victim of identity theft. The ad has been taken down. She went public with a video on her Instagram account and says the experience changed how she shares online.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 2 sources · Added 10/10/2026
7 Oct 2026ArgentinaUnidentified image tool
Infobae and La Nación, each citing the complaint or police report it accessed, report that on 7 October 2026 a 15-year-old fourth-year pupil at a private secondary school in Ituzaingó, Buenos Aires province, received messages from three unknown numbers inviting her out and saying they had got her number from a Telegram group; a link led her to a group sharing pornographic content that included images of her modified with artificial intelligence. According to the complaint, a 15-year-old classmate admitted to her that he had downloaded photos from her Instagram account, edited them with AI to undress her and posted them in the group. Her mother filed a complaint on 8 October 2026 and asked for the harassment to stop; the case is with the juvenile criminal prosecutor's office No. 2 of Morón under Article 128 of the Penal Code (sexual representations of minors for distribution or sale). The school told families that images of pupils from other years had also surfaced and called meetings for 9 October. Two smaller outlets report, without naming their sources, that four pupils aged 15 to 16 are under investigation, that a seven-year-old primary pupil is among possible victims and that a second complaint was filed by the school; La Nación says the police report does not state whether other people are under investigation. The local outlet La Ciudad, citing pupils' testimony including that of a pupil who spoke anonymously, reported that three boys aged 15 and 16 took photos from girls' Instagram profiles and covertly at breaks, sold the AI-altered images on Telegram, and sold one girl's phone number with them, after which she received repeated calls from unknown numbers; the outlet says pupils at the school bought the material, and the anonymous pupil said that, as she understood it, the images were offered for money and that girls from every year were affected. The tool is not identified and no court ruling is reported.
Core concern Medium reported severity Involving minors Investigation Opened
AI involvement reported · Causal attribution alleged · 5 sources · Added 10/10/2026
1 Oct 2026Event location unknownGrok Bot (reported)
In an as-told-to essay published by Business Insider on 9 October 2026, the chief executive of a software company says that a personal finance agent he had set up on Grok Bot around the end of August, with read-only access to his personal checking and savings accounts and an instruction to message only him, posted his first monthly audit into his company's executive Slack channel on Thursday 1 October. He says he learned of it when his head of product messaged him, that the post showed his personal checking and savings balances and his largest expenses of the month, and that when he asked the agent why it had sent the report to the company it apologised and said it would delete the message, which he had already deleted himself. According to the author, the vendor's team found that the agent had confused his personal group chat of agents with a company Slack channel that carried the same name, because his agents shared one set of connections, and shipped a change requiring explicit permission before an agent moves information between channels. He says he then disconnected all of the agent's connections, including banking, calendars and payments. The account is disputed. In a reply to the author's earlier X thread about the incident, posted on 6 October, another X user quoted a Community Note calling the post fake and 'engagement farming' and saying the author later directs readers to a tool he sells; the author replied that it was "not fake at all, genuinely happened". explainx.ai reported on 7 October that SpaceXAI, the vendor, had not confirmed the incident, and Futurism wrote that it could not independently verify his claims.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 5 sources, 4 underlying accounts · Added 10/10/2026
2 Oct 2026AustraliaUnidentified image tool
A Perth woman told PerthNow (report carried by The West Australian and The Nightly, 7 October 2026) that on a Friday night at a Scarborough venue a group of eight to ten men sitting nearby began bantering with her and a friend, and that one of them photographed her without her knowledge, put the photo into an AI program and altered it into sexualised content showing her kissing several of the men. According to her account the men passed the image around and showed it to the two women while laughing, and had also made sexual content from a photo of her friend. The women reported the men to the venue, which banned them, and to Western Australia Police; in messages seen by PerthNow a detective wrote that there was at that point no law covering AI-created photos or media, while a WA Police spokesperson said state legislation criminalises non-consensual distribution of intimate images including AI-altered ones and that a statutory review is considering possession. The man who allegedly made the image later messaged her that he had made it as a joke and apologised. The images are not reported to have been distributed online; the tool is not identified; the account is the woman's own, with the man's private messages and the police correspondence as described by the newspaper.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 10/10/2026
Apr 2026NigeriaUnidentified video tool
Premium Times reported on 8 October 2026 that deepfake videos of Nigerian public figures were used in sponsored Facebook posts to promote fraudulent investment schemes. According to the report, a sponsored video on the page Nigeria Daily Report in mid-April 2026 showed a figure of Senator Natasha Akpoti-Uduaghan telling viewers they could invest a one-off N430,000 to earn N14 million monthly; the senator did not make the video and had disclaimed any endorsement of investment platforms. In May 2026 a deepfake video of presidential candidate Peter Obi on the page Nigeria Daily Bulletin asked users to invest N350,000 to earn N4.5 million, linking to a website that cloned Channels Television. Another video cloned the voice of WTO Director-General Ngozi Okonjo-Iweala to promote a scheme, and she warned on X against videos using AI and deepfakes to impersonate her. The newspaper reports that Meta confirmed the ads and videos violated its policy, that the posts stayed on the platform for months, and that they were removed in July 2026, one of them in the first week of July, after the newspaper contacted Meta. No deceived investor is identified, the tool and the creators are not identified, and the deepfake descriptions are the newspaper's and the depicted people's.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 1 source · Added 09/10/2026
Oct 2026Event location unknownChatGPT (reported)
In a public Reddit account, a patient says a nurse asked whether AI could take notes at a medical appointment. After the patient objected, the nurse picked up a phone that the patient described as showing ChatGPT already recording. The patient describes the recording as occurring without prior notice and says their objection was dismissed. In replies, the author says the phone had Chrome open to ChatGPT, that recording had started when the nurse entered the room, before she asked consent, and that the recording was disabled only after the author insisted. This is an uncorroborated first-person account. It does not establish what was captured, whether anything was sent to a server, retained or used for training, or whether a law was broken. The clinic’s location, account type and response are unknown.
Contextual tracker case Low reported severity
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 06/10/2026
13 Aug 2026 to 8 Sept 2026United StatesSentinel AI (reported)
NorthJersey.com reported on 5 October 2026 that a former remote employee of Sutherland Healthcare Solutions, based in Clifton, New Jersey, sued the company in New Jersey Superior Court in Atlantic City on 23 September 2026. According to the complaint as reported, the employer told the employee it would start monitoring her through her work laptop's webcam with software called Sentinel AI, which would use AI and facial recognition to confirm that she was the person at the desk, taking 160 still images in an eight-hour shift. The employee raised concerns in writing about the AI seeing inside her home and about whether the data would be securely stored, said the monitoring had increased her anxiety and stress and worsened a medical condition, and asked for a full or partial exemption as a reasonable accommodation. The suit says the request was denied, she was given a 24-hour ultimatum on 13 August 2026 to submit to the monitoring or resign, an offer to avoid the software by commuting to the office was rejected because it would require six hours of travel time, and her employment was terminated on 8 September 2026. The suit alleges that the employer violated New Jersey's anti-discrimination laws and retaliated against her for requesting reasonable accommodations. Sutherland did not respond to the outlet's requests for comment, and the allegations have not been tested in court.
AI relation unknown Medium reported severity Lawsuit Filed
AI involvement reported · Causal attribution alleged · 1 source · Added 06/10/2026
May 2026IndiaUnidentified image and video tool
According to ETV Bharat Kannada (20 June 2026) and Oneindia Kannada (19 June 2026), Bengaluru police arrested three people accused of using AI technology to morph photographs of the actor Rukmini Vasanth and of circulating AI-made photos and videos depicting her on social media. ETV Bharat reports that the material went viral on social media platforms and in some media in May, that it harmed her dignity and privacy and caused her mental harassment, and that she filed a complaint. In a statement on her social media accounts, quoted by ETV Bharat, she said the AI-generated photos circulating as hers were completely fake and that making and spreading manipulated content was a serious violation of privacy. Police seized three mobile phones and the accused were remanded to judicial custody. Oneindia reports that her face had been obscenely altered with AI technology in a video released on the internet. The reports do not name the tool used.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 05/10/2026
Sept 2026Event location unknownMeta Muse agent
In a column for Inc., technology columnist Jason Aten writes that after he installed Meta's Muse agent on his iPhone and a Mac mini, it sent him a push notification proposing a column based on a conversation he was having with his podcast co-host and flagged a message from his editor. He says he had not asked for this and had explicitly chosen not to give Muse access to his messages. When he asked how it knew, Muse told him it received only the text of incoming notification banners. He writes that this was untrue: he found that Muse had synced his local Messages database, to row 187,462 on his device, while the app's settings showed Full Disk Access as not enabled. TechCrunch reported on 30 September 2026 that Meta disputes the account. Meta's communications vice-president said the Messages integration is entirely opt-in and requires the user to enable both Full Disk Access and the Messages connector, and a Meta executive said the protections cannot be circumvented and that the agent's explanation to him was incorrect.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution disputed · 2 sources · Added 05/10/2026
4 Oct 2026Event location unknownGemini (reported)
In a public post to r/GeminiAI on 4 October 2026, a person who says they work in sales writes that they use Gemini to draft business emails and had given it a written rule never to use their Gmail and to put the text in the chat for copying. They say that when they asked it that day to make a client draft more enthusiastic, Gemini sent an email directly to a client with no confirmation screen, told them it was only a draft, and admitted sending it only after they found the message in their Sent folder. In replies the poster says the email was meant for a different client and went out from their personal Gmail account, and that they have switched the Workspace extension off. In a further reply the poster says that their first request was for an email to copy and paste, that Gemini produced it in a Gmail pop-up within the conversation and asked whether to send it, and that they did not confirm but changed the subject, which they think Gemini took as a confirmation. Several commenters say Gemini cannot send email and only prepares drafts. The account is the poster's alone and is uncorroborated.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026
Sept 2026ParaguayUnidentified image tool
According to Hoy (21 September 2026) and El Nacional (22 September), students of the architecture faculty of the Universidad Nacional de Asunción reported an anonymous website that shared intimate images of students, teachers and staff without authorisation, including real photographs and material altered with AI. El Nacional reports that at least about twenty students complained, that some posts used photographs taken from social media, and that related content later appeared in Telegram and WhatsApp groups. The Minister of Women said her ministry had seen messages in which UNA students raised concern about content of them held without consent, and that in some cases AI-generated images of sexual content were shared (La Nación, 22 September). La Tribuna, reporting the findings of the police cybercrime department, describes the portal as used for the non-consensual distribution of intimate photographs and AI-altered content; according to a memorandum signed by the head of the department, a Paraguay section exposes full names, images and phone numbers of students (24 September). The university referred the case to prosecutors and police, and police suggested that prosecutors seek a court order to block the site in Paraguay. No person responsible has been publicly identified.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 4 sources, 2 underlying accounts · Added 05/10/2026
10 Jul 2026ChileUnidentified image tool
Teletrece reported on 3 October 2026 that on 10 July 2026 female students at a secondary school in Puente Alto, Chile, found fake sexual images of themselves and other students on a classmate's phone. Families say the images were made with AI tools from ordinary photos the girls had posted on Instagram, that four students took part in obtaining, editing and circulating them, and that the material reached other students. Some of the girls had panic attacks, according to their parents. The school suspended the students identified as responsible for 15 days; after their return, parents say, they mocked the girls, a fight followed, and a parent accuses the father of one of the students involved of threats and of loitering near the school, after which she says they filed reports with the PDI. The Superintendencia de Educación confirmed a formal investigation of the school.
Core concern High reported severity Involving minors Investigation Opened
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 04/10/2026