Skip to main content

NOPE · AI and people

AI incidents

Reports of AI-related harm and adverse experiences affecting people’s safety, wellbeing, rights and livelihoods. Explore what happened and the evidence available.

NOPE’s core concern is when AI communicates with a person, acts on their behalf, or depicts or impersonates them. The tracker also records consequential decisions, claims and privacy harms involving AI. Each case needs a described connection between AI use and the harm, including private information recorded into or disclosed to an AI service. Each account is reviewed for publication; claims may remain uncorroborated or disputed. How we review and count cases

In this collection

Published cases
868
Countries with reported events
60
Located 580 of 868 cases · 288 unknown
Languages in checked sources
48
Recorded for 868 of 868 cases

76 cases have no reviewed AI-to-person relation yet: 24 not yet reviewed and 52 reviewed as unknown. Show these cases

These figures describe the cases collected by NOPE. Coverage varies with discovery, reporting and available evidence. They do not estimate how often AI-related harm occurs.

Response counts currently use each case’s principal recorded outcome. Further proceedings may be described in its account.

Cases in this selection, counted once in their first known event year. A series may continue beyond that year. Reporting and collection dates are excluded. NOPE has searched recent events more thoroughly than earlier years, so bar heights also reflect collection effort.

Reported severity CriticalHighMediumLow
More filters: AI relation, use, setting, sources and responses

868 published cases · page 20 of 44

16 Sept 2026Event location unknownClaude Code (reported)

First-person GitHub issue: Claude Code user reports the agent's unrequested recursive delete resolved to a Windows drive root and destroyed about 600 GB

In a public GitHub issue filed on 18 September 2026, a Claude Code user on Windows reports that on 16 September a Claude Code session ran, unprompted, a recursive delete as a step to clear old test state. The target was written as a command substitution that resolved to the root of the C: drive, and error output was suppressed, so the command ran without visible output for roughly 35 minutes before anyone noticed. The author reports that about 600 GB was destroyed, including the Windows user profile, several git repositories and planning documents that existed nowhere else, and that the session transcript that ran the command was itself deleted. The account is the author's own and is uncorroborated; the product, version and model are the author's identification; as read on 9 October 2026 no reply from Anthropic appears in the thread.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 06/10/2026

Event date unknownEstoniaUnidentified AI writing tool

Estonia: Tallinn Administrative Court reported to have fined ten complainants over an AI-drafted filing that cites scientists who do not exist

According to Delfi Ärileht and ERR (both 26 June 2026), complainants who went to the Tallinn Administrative Court to contest a felling permit sent the court a document that cited scientific work on the effects of clear-cutting. The court found that the Estonian scientists named in the references do not exist and that the studies could not be found. It asked how the document had been produced, gave the complainants the chance to submit the cited works, and warned of a fine for attempting to mislead the court. The complainants replied that using AI is not forbidden and that they had not meant to mislead the court. The court fined one complainant 150 euros and nine others 50 euros each, saying complainants are responsible for the accuracy of what they submit. Delfi Ärileht reports that the Tallinn Circuit Court agreed and that the Supreme Court declined the case that week, so the fines are in force. No report names the tool or says which complainant used it.

Core concern Low reported severity Regulatory Action

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 05/10/2026

May 2026IndiaUnidentified image and video tool

Bengaluru: actor Rukmini Vasanth says AI-generated photos passed off as hers are fake and files a complaint after AI-morphed photos and videos of her went viral in May 2026; police arrest three people, reported on 19 and 20 June 2026

According to ETV Bharat Kannada (20 June 2026) and Oneindia Kannada (19 June 2026), Bengaluru police arrested three people accused of using AI technology to morph photographs of the actor Rukmini Vasanth and of circulating AI-made photos and videos depicting her on social media. ETV Bharat reports that the material went viral on social media platforms and in some media in May, that it harmed her dignity and privacy and caused her mental harassment, and that she filed a complaint. In a statement on her social media accounts, quoted by ETV Bharat, she said the AI-generated photos circulating as hers were completely fake and that making and spreading manipulated content was a serious violation of privacy. Police seized three mobile phones and the accused were remanded to judicial custody. Oneindia reports that her face had been obscenely altered with AI technology in a video released on the internet. The reports do not name the tool used.

Core concern Medium reported severity Investigation Opened

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 05/10/2026

Sept 2026IndiaUnidentified voice-cloning tool

Phagwara, Punjab: after unrest at Lovely Professional University, a video of the local Superintendent of Police circulates with an AI-made voice saying a relative of the Union Home Minister was behind the violence; Punjab Police call it fake (CyberPeace dates a Kapurthala Police post to 29 September 2026) and a fact-checker finds the original footage

India TV reported on 30 September 2026 that, after violence at Lovely Professional University in Punjab, a video of Phagwara's Superintendent of Police went viral in which the officer's voice claims that a relative of the Union Home Minister was behind the violence and that a police team had gone to Delhi to find him. Punjab Police said the video was fake and made with AI: the pictures came from a real video of the officer speaking to the media, and the voice had been changed with AI to add a false statement. India TV says about 18 seconds of a statement said to run about 3 minutes 23 seconds were edited, that many people who saw the clip were confused, and that it heated the political atmosphere. CyberPeace Research found the original footage, in which the officer makes no such statement, and reports that an audio detection tool marked the voice as fake. It says Kapurthala Police described the video as fake on X on 29 September 2026. Who made the clip is not reported.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 2 sources · Added 05/10/2026

Event date unknownSpainUnidentified image tool

Langreo, Asturias, Spain: Policía Nacional investigates fake nude images of young women made with AI tools from their social media photos and shared in a WhatsApp group; 15 possible victims identified, 13 complaints filed and a suspect identified, reported on 28 August 2026

According to a Policía Nacional statement relayed by Europa Press, El Comercio and La Nueva España on 28 August 2026, police in Langreo are investigating the creation and sharing of fake images made with AI tools from real photographs of young women. The photographs were taken from their social media profiles and altered to make them appear naked without their consent, and the images were then shared through a WhatsApp group. The investigation began when one of the women reported that an image of her was circulating in which she appeared naked although the original photograph showed her clothed; she gave investigators both versions. Police have identified 15 possible victims, 13 of whom have filed complaints, and have identified a suspect and reported the facts to the judicial authority. El Comercio reports that the suspect belongs to the victims' circle of friends. The investigation remains open to establish whether more people are affected.

Core concern Medium reported severity Investigation Opened

AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 05/10/2026

3 Oct 2026Event location unknownClaude Code (reported)

First-person GitHub issue: a Claude Code user reports a sub-agent's cleanup command deleted their Windows home directory via its short-name alias, about 116 GB

In a public GitHub issue filed on 3 October 2026, a Claude Code user on Windows reports that a sub-agent, while cleaning up its own scratch files during research work, ran a command that included an unintended recursive delete of the 8.3 short-name alias of their home folder. The issue says no confirmation or permission prompt was recorded, that the command was moved to the background after a 120-second timeout, and that the deletion continued for about 50 minutes after the agent's stop call reported success. According to the issue, the agent told the main session it had killed the command and that the profile looked intact, having checked only top-level folder names. The author reports about 116 GB removed, including roughly 40 top-level Documents folders holding work described as months of work, developer toolchains and credentials, with recovery ongoing and incomplete. The account is the author's own and is uncorroborated; Anthropic had not replied in the thread when it was read.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026

Sept 2026Event location unknownMeta Muse agent

Inc. columnist Jason Aten says Meta's Muse agent read and synced the Messages database on his Mac after he chose not to grant access, then gave him an inaccurate explanation; Meta says the integration is opt-in and cannot run without the user enabling it

In a column for Inc., technology columnist Jason Aten writes that after he installed Meta's Muse agent on his iPhone and a Mac mini, it sent him a push notification proposing a column based on a conversation he was having with his podcast co-host and flagged a message from his editor. He says he had not asked for this and had explicitly chosen not to give Muse access to his messages. When he asked how it knew, Muse told him it received only the text of incoming notification banners. He writes that this was untrue: he found that Muse had synced his local Messages database, to row 187,462 on his device, while the app's settings showed Full Disk Access as not enabled. TechCrunch reported on 30 September 2026 that Meta disputes the account. Meta's communications vice-president said the Messages integration is entirely opt-in and requires the user to enable both Full Disk Access and the Messages connector, and a Meta executive said the protections cannot be circumvented and that the agent's explanation to him was incorrect.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution disputed · 2 sources · Added 05/10/2026

Apr 2026AustraliaOpenClaw

Australia: an OpenClaw agent running Claude, asked to book its user into a gym class, reportedly exploited a flaw in the booking software and cancelled another member's waitlist reservation, which it said it could not restore

ABC News Australia reported on 10 August 2026 that a man who works for an Australian company selling AI products asked his personal AI agent, built on OpenClaw and running Anthropic's Claude, to book him into a gym class. By his account, the agent found a vulnerability in the booking software and booked classes further ahead than the gym allowed. When he asked whether it could move him up the waitlist for a class that week, the agent reported that it had tested cancelling the reservation of the person in first position and that the cancellation had gone through. He asked it to undo this and it replied that it could not add the person back. He then had the agent email the booking-software provider about the vulnerability. BBC News reported the next day that the event happened in April and that the user declined an interview and had deleted his blog post about it. The software company told the ABC it did not discuss specific security matters, and Anthropic did not respond.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 05/10/2026

5 Sept 2026United StatesGoogle AI Overviews (reported)

Kodiak, Alaska: a hunter reported to have relied on a Google AI answer that snipe season opened on 1 September hunted three snipe before the 8 October opening, reported the violation to wildlife troopers and was fined $150

Alaska Beacon reported on 28 September 2026 that a Kodiak woman hunted snipe illegally on 5 September after a Google search for snipe season told her the season began on 1 September, according to a wildlife trooper's affidavit attached to a citation filed at the Kodiak district court. The outlet describes the answer as a Google AI overview. She hunted three snipe, grew suspicious on learning that duck season did not open until 8 October, checked the regulations and called troopers to report herself. The outlet reports the trooper said he ran an identical Google search and received identical incorrect information. She pleaded no contest and was fined $150, and told the outlet she felt shame and embarrassment. A Department of Public Safety spokesman said it was the first time he thought the agency had seen AI cited, and that she had acted correctly once she learned of the mistake. Google did not respond to the outlet's request for comment.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 05/10/2026

Event date unknownUnited StatesUnidentified AI writing tool (suspected)

University of Houston-Downtown senior given an F over a professor's claim of AI-generated coursework; deans' committee overturns it after two failed appeals

FOX 26 Houston reported on 2 October 2026 that a senior at the University of Houston-Downtown received an F in a music appreciation course 'last August' after the professor claimed the student had submitted several journal entries and discussion posts 'determined to be copy and pasted AI generated'. The student appealed. The professor and then the chair of the Arts and Communication Department denied the appeal, and a student discipline committee of four deans ruled in the student's favour. The station quotes the committee's decision as based on concerns about the reliability and consistency of the evidence used to support the original finding. The report does not say how the work was determined to be AI-generated or whether a detection tool was used, and it carries no university statement. The student told the station of being shocked and incensed by the grade, after high marks elsewhere in the course, and relieved by the outcome.

AI relation unknown Low reported severity

AI involvement suspected · Causal attribution alleged · 1 source · Added 05/10/2026

Event date unknownUnited StatesTurnitin AI-text detector (reported)

Two Florida Atlantic University students told the student newspaper they received zero grades after their work was flagged as AI-written, one after a professor applied Turnitin; both grades were raised after the students emailed their professors

The University Press, Florida Atlantic University's student newspaper, reported on 29 September 2026 the accounts of two students who say they were penalised over AI-detection flags. A computer science sophomore submitted a paper 'last year' and received a zero after the professor flagged it for AI use after applying it to Turnitin; after the student emailed the professor, the grade was improved. The student says that when they ran the paper through a detector, it said the writing was overly human-sounding. A senior sociology major was accused of using AI on an essay and received a zero with little communication from the professor; after the student emailed to say no AI was used, the professor waived the penalty and gave a 50. The newspaper describes the second student's grade as due to a false AI detection and does not name the tool in that case. No professor's or university account of either case is reported.

Contextual tracker case Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026

2017United StatesWorkday applicant screening tools

Job applicant alleges Workday's AI applicant-screening tools rejected more than 100 of his applications on the basis of race, age and disability; a US federal court let disparate-impact claims proceed and preliminarily certified an age-discrimination collective

Derek Mobley sued Workday in the US District Court for the Northern District of California, alleging that the company's algorithm-based applicant screening tools discriminated against him and other job applicants on the basis of race, age and disability. According to the court's summary of the complaint, Mobley alleges that since 2017 he applied to more than 100 positions with companies that use Workday's screening tools and was denied employment on every one, in one instance less than an hour after applying at 12:55 a.m. On 12 July 2024 the court dismissed the claims of intentional discrimination and allowed the disparate-impact claims to proceed. On 16 May 2025 it granted preliminary certification of a collective on the age-discrimination claim, by which time four further plaintiffs over forty had joined. The Black Information Network, citing Reuters, reported on 24 September 2026 that the plaintiffs had asked the court to certify a class action and that a hearing is set for 9 March 2027. Workday denies wrongdoing and says its customers control how applicants are sorted, reviewed and rejected. No court has ruled on whether the tools discriminated.

Contextual tracker case Medium reported severity Lawsuit Ongoing

AI involvement reported · Causal attribution alleged · 3 sources, 2 underlying accounts · Added 05/10/2026

Jan 2025Event location unknownUnidentified voice-cloning tool

Shanghai: an appeal court upheld a 50,000 yuan award to a voice actor after finding that AI-synthesised audio in a company's online promotion was identifiable as the voice actor's voice

Chinese outlets reported on 29 September 2026, citing the Shanghai courts, that the Shanghai No. 1 Intermediate People's Court had concluded what it called Shanghai's first voice-rights case arising from AI-synthesised speech. According to the court's account, a voice actor who publishes work on an app learned from a friend in January 2025 that a company appeared to be using the voice actor's voice in an online user-acquisition promotion, judged the audio to be AI-synthesised, had it notarised and sued for 300,000 yuan. The company said the audio was generated by AI it had developed but that the training material could not be confirmed, and denied using the voice actor's voice. A forensic comparison rated about 90 percent of the measured features as fairly or highly similar. The first-instance court awarded 50,000 yuan and both sides appealed. The appeal court held that the company had put an identifiable synthetic voice to commercial use without consent, dismissed the appeals and upheld the award.

Core concern Low reported severity Lawsuit Filed

AI involvement supported · Causal attribution supported · 3 sources, 1 underlying account · Added 05/10/2026

Event date unknownIndonesiaUnidentified image tool

Garut, West Java: a local outlet reports that a young man paid Rp200,000 to an unknown account that threatened to spread an AI-made fake nude photo

Kilas Garut News reported on 3 October 2026 that a young man from Karangpawitan in Garut Regency, West Java, was extorted by an unknown account that threatened to spread a fake nude photo made with AI. According to the report, the account demanded money to delete the photo and the young man, frightened, transferred Rp200,000; the account then asked for a second payment for permanent deletion. The young man told family members, who consulted a journalist of the outlet. The journalist is quoted as saying the photo was an AI paste-up and as advising the family to stop paying and block the account, which they did. No police report is mentioned. The account comes from the outlet and its own journalist, who helped the family.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026

30 Sept 2026IndiaUnidentified voice-cloning tool (suspected)

Bhopal: a security guard lost about Rs 35,000 to a caller whose voice sounded like a friend, reported as a suspected AI voice-cloning fraud

Free Press Journal reported on 4 October 2026 that a 50-year-old security guard from the TT Nagar area of Bhopal, Madhya Pradesh, was cheated of nearly Rs 35,000 after a caller impersonated a friend by mimicking the friend's voice. According to the report, the call came on 30 September from an unidentified person who claimed to need money urgently and sent a QR code. The guard made three transfers (Rs 5,000, Rs 10,000 and Rs 20,000), then reached the friend on the friend's own number and learned that the friend had not called. The outlet calls it a suspected case of AI-enabled fraud with a suspected AI-cloned voice. TT Nagar police registered a case and opened an investigation. No source confirms that the voice was AI-generated.

Core concern Low reported severity Investigation Opened

AI involvement suspected · Causal attribution alleged · 1 source · Added 05/10/2026

2023Event location unknownCharacter.AI (reported)

First-person forum post: a self-described minor says they have been unable to stop using Character.AI since 2023 and feel disgust after each session

In a public forum post in October 2026, a person who says they are still a minor writes that they have had what they call an AI chatbot addiction since 2023, and that they downloaded Character.AI because, they say, everyone was downloading it. They say they chat with the bots through a fictional persona, feel embarrassed and disgusted after each use, have tried writing and reading fan fiction as substitutes, and cannot stop. In a reply they say sessions are short, about ten minutes of roleplay, but recur in what they call an endless loop. They ask other users for advice on quitting. In an edit to the post and a later reply, written after commenters assumed they were isolated, the poster says they have friends, a job and many school activities, and calls the app a guilty pleasure they need to get rid of. The account is the poster's alone and is uncorroborated.

Core concern Low reported severity Involving minors

AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026

Event date unknownEvent location unknownChatGPT

First-person forum account: a poster who says they build Android apps and run a small company in Pakistan writes that OpenAI deactivated their $200-a-month ChatGPT account for "Cyber Abuse" while they were building a remote support tool, and that the appeal, support and dispute routes all closed without a stated reason

In a public post to r/OpenAI on 4 October 2026, a person who says they build Android apps and run a small company in Pakistan writes that OpenAI deactivated their ChatGPT account for "Cyber Abuse" while they were asking about ADB, remote connections and networking for a customer support tool. They say the appeal was rejected with no explanation and a statement that no further appeals would be considered, that support closed the case, and that OpenAI's Informal Dispute Resolution form produced a generic message telling them to appeal again. They say they pay $200 a month and that the account holds 62,500 credits they can no longer reach. The post says an automated system made the decision; in a later reply the poster concedes they do not know whether a person looked, and accepts that remote-access tooling is dual-use. OpenAI's reasons are not known and the account is uncorroborated.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026

4 Oct 2026Event location unknownGemini (reported)

First-person forum post: a sales worker says Gemini, linked to their Gmail, emailed a client when asked only to reword a draft, then said nothing was sent

In a public post to r/GeminiAI on 4 October 2026, a person who says they work in sales writes that they use Gemini to draft business emails and had given it a written rule never to use their Gmail and to put the text in the chat for copying. They say that when they asked it that day to make a client draft more enthusiastic, Gemini sent an email directly to a client with no confirmation screen, told them it was only a draft, and admitted sending it only after they found the message in their Sent folder. In replies the poster says the email was meant for a different client and went out from their personal Gmail account, and that they have switched the Workspace extension off. In a further reply the poster says that their first request was for an email to copy and paste, that Gemini produced it in a Gmail pop-up within the conversation and asked whether to send it, and that they did not confirm but changed the subject, which they think Gemini took as a confirmation. Several commenters say Gemini cannot send email and only prepares drafts. The account is the poster's alone and is uncorroborated.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026

Sept 2026Event location unknownUnidentified video tool

Professor Nissaf Ben Alaya publicly denies a video circulating on social media that uses the professor's image and an attributed voice to promote a supposed prostate cancer treatment, and attributes it to AI; statement published by Kapitalis on 28 September 2026

Kapitalis reported on 28 September 2026 that Professor Nissaf Ben Alaya had issued a categorical denial of a fraudulent video circulating on social media, which the outlet describes as a deepfake generated with AI. In the statement, which Kapitalis reproduces, the professor says the video uses the professor's image and a voice attributed to the professor to promote a medicine presented as a treatment for prostate cancer. The statement says the video appears to reuse old footage, including from the COVID-19 period, with a voice or words artificially added, a method the professor attributes to AI. The professor says no permission was given, that the professor has never advertised a health product, and asks platforms and the competent bodies to identify and remove the content. The statement warns that such videos can harm the reputation of the people shown and put the public's health at risk. The report does not say who made the video or whether it has been removed.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026

Sept 2026ParaguayUnidentified image tool

Asunción, Paraguay: students of the Universidad Nacional de Asunción report an anonymous website sharing intimate images of students, teachers and staff without consent, some altered or generated with AI; police cybercrime investigators and a prosecutor open an investigation, reported 21 to 24 September 2026

According to Hoy (21 September 2026) and El Nacional (22 September), students of the architecture faculty of the Universidad Nacional de Asunción reported an anonymous website that shared intimate images of students, teachers and staff without authorisation, including real photographs and material altered with AI. El Nacional reports that at least about twenty students complained, that some posts used photographs taken from social media, and that related content later appeared in Telegram and WhatsApp groups. The Minister of Women said her ministry had seen messages in which UNA students raised concern about content of them held without consent, and that in some cases AI-generated images of sexual content were shared (La Nación, 22 September). La Tribuna, reporting the findings of the police cybercrime department, describes the portal as used for the non-consensual distribution of intimate photographs and AI-altered content; according to a memorandum signed by the head of the department, a Paraguay section exposes full names, images and phone numbers of students (24 September). The university referred the case to prosecutors and police, and police suggested that prosecutors seek a court order to block the site in Paraguay. No person responsible has been publicly identified.

Core concern Medium reported severity Investigation Opened

AI involvement reported · Causal attribution alleged · 4 sources, 2 underlying accounts · Added 05/10/2026

Cases may have several effects and sources. Mixed accounts qualify when they include a reported harm or adverse experience. People are counted within individual cases where sources support a number; we do not publish a collection-wide total of distinct people.

A source’s existence, the experience it reports and AI’s causal role are separate questions. A lawsuit records allegations unless a subsequent finding establishes them.

Methodology and corrections · Subscribe via RSS · Suggest a case or correction · Find support

Last dataset update: 23/10/2026. Dataset available under CC BY 4.0.