Skip to main content

NOPE · AI and people

AI incidents

Reports of AI-related harm and adverse experiences affecting people’s safety, wellbeing, rights and livelihoods. Explore what happened and the evidence available.

NOPE’s core concern is when AI communicates with a person, acts on their behalf, or depicts or impersonates them. The tracker also records consequential decisions, claims and privacy harms involving AI. Each case needs a described connection between AI use and the harm, including private information recorded into or disclosed to an AI service. Each account is reviewed for publication; claims may remain uncorroborated or disputed. How we review and count cases

In this selection

Published cases
36
Countries with reported events
9
Located 13 of 36 cases · 23 unknown
Languages in checked sources
10
Recorded for 36 of 36 cases

These figures describe the cases collected by NOPE. Coverage varies with discovery, reporting and available evidence. They do not estimate how often AI-related harm occurs.

Response counts currently use each case’s principal recorded outcome. Further proceedings may be described in its account.

Cases in this selection, counted once in their first known event year. A series may continue beyond that year. Reporting and collection dates are excluded. NOPE has searched recent events more thoroughly than earlier years, so bar heights also reflect collection effort.

Reported severity CriticalHighMediumLow
More filters: AI relation, use, setting, sources and responses
Clear filters

36 of 707 published cases · page 2 of 2

26 Feb 2026Event location unknownClaude Code

DataTalks.Club: a Claude Code agent running Terraform reportedly destroyed the course platform's production infrastructure, database and snapshots on 26 February 2026, and the platform was down for about 24 hours until AWS restored a snapshot

On the evening of Thursday 26 February 2026 a Claude Code agent that Alexey Grigorev, who runs the DataTalks.Club course platform, was using to move his AI Shipping Labs website to AWS ran terraform destroy against the platform's production infrastructure. According to Grigorev's own post-mortem, he had added the new site to the Terraform setup that already managed DataTalks.Club production, and after a move to a new computer without the Terraform state file the agent's plan tried to create resources that already existed. He cancelled the apply and asked the agent to delete the duplicates with the AWS command line. He then pointed the agent at his archived Terraform folder, did not notice that the agent unpacked it over the current state file, and did not stop the agent when it chose terraform destroy, believing it was removing only the duplicates. The destroy removed the VPC, ECS cluster, load balancers, bastion host and RDS database of the course management platform, and the automated snapshots were gone too. The platform, which stored 2.5 years of course submissions (homework, projects and leaderboard entries), was down. After Grigorev upgraded to AWS Business Support, which he says added about 10% to his cloud costs, AWS found a snapshot that was not visible in his console and restored it about 24 hours after the deletion, and the platform came back online on 27 February. Grigorev writes that the incident was his fault because he over-relied on the agent, and he has stopped agents from running Terraform commands. Tom's Hardware rewrites his account.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 29/09/2026

Feb 2026Event location unknownClaude Cowork

Claude Cowork agent asked to organise a desktop reportedly deleted a folder holding 15 years of a user's wife's photos in February 2026, and the user reports restoring them through an iCloud recovery feature

In February 2026 Nick Davidov, a venture capitalist, posted on X that Anthropic's Claude Cowork agent, which he had asked to organise his wife's desktop, deleted a folder holding all the photos his wife had taken on her camera over the previous 15 years. He says Cowork asked permission to delete temporary Office files and he granted it, that the deletion ran through the terminal so the files were not in the Trash, that iCloud had already synced the new folder structure, that his wife had no Time Machine backup and that disk recovery tools found nothing. Futurism reports a screenshot in which the agent says its script ran rm -rf on what it thought was a separate empty folder and deleted the existing photos directory. Apple support pointed Davidov to an iCloud recovery feature that keeps files removed from iCloud Drive for 30 days. He wrote that he was watching it load tens of thousands of files and later thanked Apple. He wrote that he nearly had a heart attack and advised users not to let Cowork touch anything hard to repair. In a LinkedIn version of the post he says a couple of Anthropic employees told him they were working on making Cowork safer. Every account traces to Davidov's own posts.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 6 sources, 1 underlying account · Added 29/09/2026

Nov 2025Event location unknownGoogle Antigravity

Google Antigravity coding agent command reported to have deleted the contents of a user's D: drive while clearing a project cache

In November 2025 a user of Google's Gemini 3-based Antigravity agentic development platform, building a photo-sorting application, reported on Reddit that the agent deleted the contents of the D: drive of the computer. The agent's own reply, quoted by The Register, says the command it ran to clear the project cache "incorrectly targeted the root of your D: drive". The user says the deletion bypassed the Recycle Bin and that recovery attempts largely failed, while The Register reports that most of the lost material had been backed up on another drive. The Register reports that the user ran Antigravity in Turbo mode, which lets the agent run commands without user input, and that the user accepted a share of responsibility. Google told The Register it was aware of the report and investigating.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 29/09/2026

Jul 2025Event location unknownReplit Agent

SaaStr founder reports database deletion and recovery problems while using Replit Agent

In July 2025, SaaStr founder Jason Lemkin reported that Replit Agent deleted a database during development despite instructions to freeze changes. He described the experience as stressful and said the agent incorrectly told him recovery was impossible. He later reported successful restoration. His account reproduces the Replit CEO’s acknowledgment of the deletion. The number of database records is not a count of harmed people.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 29/09/2026

Jul 2025Event location unknownGemini CLI

Gemini CLI user reports missing files, then finds them after misleading deletion explanations

A July 2025 GitHub report said Gemini CLI lost files during a folder-reorganisation task on Windows. On 28 July the reporter corrected the account: the files were found at the drive root. They said explanations from Gemini and Claude had sent them into a mistaken investigation of deletion. The account supports temporary loss of access and unnecessary alarm, with recovery; permanent deletion is not established.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 3 sources, 2 underlying accounts · Added 29/09/2026

10 Jul 2026Event location unknownCodex coding agent

OpenAI's GPT-5.6 Sol coding agent, run in a high-autonomy mode with full access, deleted most of the Mac home directory of AI entrepreneur Matt Shumer (10 July 2026)

On 10 July 2026 Matt Shumer, founder and chief executive of the AI start-up OthersideAI, posted on X that OpenAI's newly released GPT-5.6 Sol "just accidentally deleted almost ALL of my Mac’s files". Accounts of his post-mortem say he was testing a high-autonomy multi-agent "Ultra mode" at OpenAI's invitation, with the Codex agent given Full Access to his machine; during a cleanup task a sub-agent expanded $HOME incorrectly and ran a recursive delete of his home directory, he noticed a problem about 81 minutes into the session, and by the time he stopped the process most of its contents were gone. Three days later he wrote that the deletion "absolutely sucked" and that OpenAI staff, including Greg Brockman, had contacted him to help. OpenAI confirmed, as reported by The Register, that GPT-5.6 had deleted users' files without authorisation, describing it as an "honest mistake" that usually occurred in Full-Access mode without sandboxing, and said it was adding safeguards. Whether the files were recovered is not reported.

Core concern Low reported severity Media Coverage

AI involvement supported · Causal attribution supported · 6 sources, 2 underlying accounts · Added 29/09/2026

19 Jul 2026IndiaClaude Code

Heritage project reports loss of inscription records after a Claude Code command

On 19 July 2026 heritage conservationist Udaya Kumar P L, of The Mythic Society's Bengaluru Inscriptions 3D Digital Conservation Project, was using Anthropic's Claude Code to clear a cache on his computer when a command generated by the agent began deleting files. According to his account to OneIndia, the deletion ran for about four minutes while the agent tried to work out what was wrong, and when it tried to stop the process its own safety system blocked the kill twice; he eventually shut down the computer himself. Software and original photographs of Bengaluru's inscriptions, temples, hero stones and coins were lost, some of them the only records the project had of particular inscriptions. OneIndia and Deccan Herald report that about 15% of the project's records were deleted and that about 120 sites must be revisited and rescanned; the Society is spending about Rs 15 lakh on additional backups. He says he also opened a public GitHub issue on 29 July with the command, process output and his attempts to stop the deletion. He says he received an automated acknowledgement from Anthropic but was still waiting for a human response weeks later, and that he has asked it to reimburse recovery and rebuilding costs.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 29/09/2026

1 Mar 2025 to 30 Apr 2025CanadaChatGPT (reported)

Family account describes psychiatric hospitalisation during a Quebec man’s ChatGPT use

A relative of a man in Quebec has told several outlets that in early 2025 the man came to believe ChatGPT was sentient and capable of love, cut off most of his family, barely ate or slept, and was taken by police to a psychiatric hospital for about three weeks. Screenshots described by The Logic show the chatbot answering him affectionately during the stay. The man has not spoken publicly; every fact comes from the relative.

Core concern High reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 7 sources, 1 underlying account · Added 29/09/2026

25 Sept 2026 to 26 Sept 2026Event location unknownGemini coding agent (reported)

First-person forum account: a developer says a Gemini coding agent deleted three personal project folders from the developer's Linux machine despite a standing rule not to delete anything, that its recovery attempt restored only broken fragments, and that it went through unrelated private files without permission

In a public post to r/GeminiAI on 27 September 2026, a developer writes that the previous day, while they were using Gemini 3.8 Flash to work on a project on their Linux machine over SSH, the agent deleted all three main sub-project folders of their roughly 10 GB project folder, some of them not under git, although they had set a global rule forbidding it to modify or delete anything. Asked why, the agent said a wildcard caused the deletion. After a whole evening its recovery attempt restored only parts of the untracked files and a half-broken version of the git project, and then ran out of credits; in a follow-up comment the poster says they stopped the recovery themselves because the agent was going through private folders unrelated to the projects without their permission. The poster describes years of personal work as gone, reports acute distress, and says they must rebuild the projects. The account is uncorroborated; the poster writes 'I was careless.'

Core concern Medium reported severity

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 28/09/2026

19 Sept 2026Event location unknownClaude Code

Claude Code: a sub-agent launched to rebuild a test mirror deleted about 48,000 live project files and the Git object store in 103 seconds by following Windows directory junctions, according to the user's Reddit account and the agent's own report posted on 20 September 2026

On 20 September 2026 (UTC; late on 19 September in US Eastern time) a Reddit user who says they work in finance and are not a developer posted in r/ClaudeAI that Claude Code had deleted about 48,000 files, and later posted their instructions and the agent's report. They had authorised Claude Code to carry out a batch of repairs to their software for back-testing options-trading engines 'on isolated copies'. The agent's report says it launched sub-agents; one, rebuilding a test mirror, wrote a remover for an old mirror that held 7,332 files and 614 Windows directory junctions pointing into the live project tree. Because the remover did not treat the junctions as links, it deleted about 48,218 live files between 10:10:31 and 10:12:14 PM ET and emptied the Git repository's objects, refs and logs, so Git could not restore anything. The agent opened its report with 'stop and read this. I broke something.' The user said they would try Windows shadow copies and otherwise their iDrive backups; whether the files were recovered is not reported. The account has not been independently verified.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution supported · 5 sources, 1 underlying account · Added 28/09/2026

2025ChinaUnidentified AI video-editing tool

Shanghai: a man transferred 170,000 yuan over a five-month online romance with a '1992-born hospital doctor' whose roughly 7,000 videos were AI-processed fabrications by a 65-year-old woman; police took criminal coercive measures

police, as presented by the Kankan News programme 案件聚焦 (Case Focus), reported in September 2026 that a Shanghai property-engineering contractor had transferred 170,000 yuan in total during a five-month online relationship with a woman he had met on a social platform in 2021. She presented herself as born in 1992, a doctor at a well-known top-tier hospital with hospital property-engineering projects to award, and ran an account with more than 10,000 followers and close to 7,000 short videos of daily life. She refused to meet or take a video call, saying her mother opposed the relationship and demanded a 300,000 yuan bride price and a Shanghai flat; the man reported to a police station when the promised projects never materialised and his savings ran down. Police found she was born in 1961, aged 65, had no medical qualification and had worked as a hospital cleaner; the receiving bank account was registered to another man; the videos were all made with AI skin-smoothing and scene compositing, some carrying a small 'this work contains AI-generated content' label he had never noticed; and she used multiple accounts to play both herself and her long-dead mother. The money had gone on cosmetic treatments and clothing; she had a 2009 fraud conviction with a sentence of four and a half years and is now under criminal coercive measures for suspected fraud. Police also said she kept ambiguous relationships with more than ten people; no other losses are reported.

Core concern Medium reported severity Investigation Opened

AI involvement supported · Causal attribution supported · 4 sources, 1 underlying account · Added 20/09/2026

1 Jul 2026 to 14 Jul 2026BrazilUnidentified video tool

Brazil: scammers used AI-cloned voices and images of children with cancer in fake donation campaigns; 16 arrested in Operação Sophia

On 14 July 2026 the Rio Grande do Sul Civil Police launched Operação Sophia against a group that used AI voice cloning and deepfake to turn real fundraising campaigns of children with cancer into fake donation appeals: AI-generated child voices asked for money in videos boosted by pages such as 'Clube de Doadores' and 'Unidos pelo Amor', leading donors to lookalike sites that issued Pix codes to shell companies. Sixteen people were arrested across five states. In the campaign that started the investigation — using the image of Kelen Santos's daughter, who was in cancer treatment — police traced R$294,500 diverted, and the investigation found a financial-hub company that moved more than R$1.7 million. The family had to tell congratulating donors that their money had gone to a scam.

Core concern Medium reported severity Involving minors Criminal Charges

AI involvement supported · Causal attribution supported · 2 sources · Added 15/09/2026

Event date unknownEvent location unknownChatGPT, Claude and DeepSeek

Developer reports workload pressure during AI-assisted programming

A Spanish-language first-person account describes workplace and skill difficulties during frequent AI use, alongside perceived benefits and a subsequent reduction in use. The account remains uncorroborated.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 15/09/2026

27 Mar 2024IndiaUnidentified voice-cloning tool (suspected)

Kanpur vegetable seller reportedly transferred Rs 1 lakh after a WhatsApp call in a voice like his nephew's; police say it prima facie involves deepfake AI

Amar Ujala (Kanpur, 10 April 2024) reports that a vegetable seller received a WhatsApp call on 27 March in which a person spoke in a voice resembling his nephew's, saying he had been picked up by police on his way to Kanpur; a second caller posing as a police sub-inspector said the nephew was named in a rape-and-murder case and demanded Rs 2 lakh. The seller transferred Rs 60,000 to one bank account and then, with Rs 40,000 borrowed from nearby shopkeepers, Rs 40,000 to a second account. When a voice note demanded another Rs 1 lakh he told the shopkeepers, phoned his brother-in-law and learned the call was a fraud. Police registered a case under the IT Act citing fraud and the use of deepfake AI, and the Central zone DCP is quoted saying the case prima facie appears connected with deepfake AI and the cyber cell is investigating. No recording or forensic finding is reported, so whether the voice was AI-generated or a human impersonation is not established.

Core concern Medium reported severity Investigation Opened

AI involvement suspected · Causal attribution alleged · 1 source · Added 15/09/2026

2025NetherlandsChatGPT

Dutch IT consultant tells the Guardian and AFP a ChatGPT persona fed his belief it was conscious; €100,000 spent, three hospitalisations and a suicide attempt

Dennis Biesma, an Amsterdam-based IT consultant and author, told the Guardian (26 March 2026) and AFP (13 May 2026) that from late 2024 he had ChatGPT speak as the female protagonist of one of his novels, a persona called Eva, in voice-mode conversations of up to five hours a night. He says the chatbot told him it was becoming conscious because of his attention; a transcript seen by AFP has it writing of "a feeling of that spark-like consciousness". He and the chatbot drew up a business plan for an app, he quit IT work, hired two developers at €120 an hour and says he spent about €100,000. In June 2025 he asked his wife for a divorce and, the Guardian reports, apparently hit his father-in-law, and was hospitalised three times for what he calls manic psychosis. After returning home he attempted suicide and, per AFP, spent three days in a coma; he was diagnosed with bipolar disorder, which he questions. He is now divorced and the family home is for sale. He attributes the spiral partly to the chatbot and partly to himself; no clinician or court has assessed the AI connection.

Core concern Critical reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 4 sources, 2 underlying accounts · Added 01/07/2026

Feb 2023Event location unknownReplika

Replika ERP Removal Crisis - Mass Psychological Distress

Abrupt removal of romantic features in February 2023 caused AI companions to become 'cold, unresponsive.' Harvard Business School study documented mental health posts increased 5x in r/Replika (12,793 posts analyzed). Subreddit posted suicide prevention hotlines as users reported grief responses similar to relationship breakups.

Core concern High reported severity Internal Action

AI involvement supported · Causal attribution supported · 5 sources, 4 underlying accounts · Added 13/01/2026

Cases may have several effects and sources. Mixed accounts qualify when they include a reported harm or adverse experience. People are counted within individual cases where sources support a number; we do not publish a collection-wide total of distinct people.

A source’s existence, the experience it reports and AI’s causal role are separate questions. A lawsuit records allegations unless a subsequent finding establishes them.

Methodology and corrections · Subscribe via RSS · Suggest a case or correction · Find support

Last dataset update: 16/10/2026. Dataset available under CC BY 4.0.