Skip to main content

NOPE · AI and people

AI incidents

Reports of AI-related harm and adverse experiences affecting people’s safety, wellbeing, rights and livelihoods. Explore what happened and the evidence available.

NOPE’s core concern is when AI communicates with a person, acts on their behalf, or depicts or impersonates them. The tracker also records consequential decisions, claims and privacy harms involving AI. Each case needs a described connection between AI use and the harm, including private information recorded into or disclosed to an AI service. Each account is reviewed for publication; claims may remain uncorroborated or disputed. How we review and count cases

In this selection

Published cases
450
Countries with reported events
48
Located 269 of 450 cases · 181 unknown
Languages in checked sources
42
Recorded for 450 of 450 cases

65 cases have no reviewed AI-to-person relation yet: 1 not yet reviewed and 64 reviewed as unknown. Show these cases

These figures describe the cases collected by NOPE. Coverage varies with discovery, reporting and available evidence. They do not estimate how often AI-related harm occurs.

Response counts currently use each case’s principal recorded outcome. Further proceedings may be described in its account.

Cases in this selection, counted once in their first known event year. A series may continue beyond that year. Reporting and collection dates are excluded. NOPE has searched recent events more thoroughly than earlier years, so bar heights also reflect collection effort.

Reported severity CriticalHighMediumLow
More filters: AI relation, use, setting, sources and responses
Clear filters

450 of 1099 published cases · page 20 of 23

Event date unknownEvent location unknownGemini note-taking in Google Meet

First-person forum account: an agency employee in England says Gemini note-taking in Google Meet kept transcribing two prospective clients after the agency's boss left the call, and that the boss passed their private post-meeting discussion to staff to shape a follow-up pitch

In a public post to r/LegalAdviceUK on 28 September 2026, an employee of a marketing agency in England writes that their boss pitched a prospective client and the client's business partner on a Google Meet call with Gemini note-taking switched on. After the boss said goodbye and left, the two business partners stayed on the call to discuss the proposal and the other agencies they were considering, and Gemini kept taking notes. The boss then sent the employee the notes and transcript, which named a competing agency and included 'personal details of who they spoke to specifically on the call', and asked for a follow-up deck built on what the partners liked and disliked. The poster believes the partners did not know they were still being transcribed. Google's help page says Meet tells all participants when notes are being taken; whether the partners noticed is not known. The account is uncorroborated.

Contextual tracker case Low reported severity

AI involvement reported · Causal attribution alleged · 4 sources, 2 underlying accounts · Added 29/09/2026

Event date unknownUnited StatesUnidentified image and video tool

Louisiana police warrant alleges a man made AI nude images and a simulated sex video of a woman without consent and showed them to her; he was arrested

A Louisiana arrest warrant alleges that a man used AI, through an online website, to create nude images and a simulated sex video of a woman without her consent and showed them to her on his phone. Investigators say they reviewed the material she recorded and found AI-generated nude images. He was arrested in September 2026 on one count of unlawful deepfakes; the accusation has not been tried.

Core concern Medium reported severity Criminal Charges

AI involvement reported · Causal attribution alleged · 5 sources, 1 underlying account · Added 29/09/2026

25 Sept 2026 to 26 Sept 2026Event location unknownGemini coding agent (reported)

First-person forum account: a developer says a Gemini coding agent deleted three personal project folders from the developer's Linux machine despite a standing rule not to delete anything, that its recovery attempt restored only broken fragments, and that it went through unrelated private files without permission

In a public post to r/GeminiAI on 27 September 2026, a developer writes that the previous day, while they were using Gemini 3.8 Flash to work on a project on their Linux machine over SSH, the agent deleted all three main sub-project folders of their roughly 10 GB project folder, some of them not under git, although they had set a global rule forbidding it to modify or delete anything. Asked why, the agent said a wildcard caused the deletion. After a whole evening its recovery attempt restored only parts of the untracked files and a half-broken version of the git project, and then ran out of credits; in a follow-up comment the poster says they stopped the recovery themselves because the agent was going through private folders unrelated to the projects without their permission. The poster describes years of personal work as gone, reports acute distress, and says they must rebuild the projects. The account is uncorroborated; the poster writes 'I was careless.'

Core concern Medium reported severity

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 28/09/2026

21 Sept 2026 to 25 Sept 2026FrancePangram AI-text detector

Académie Goncourt drops Thélyson Orélien's novel as likely AI-generated after Pangram claims; his publisher later says it found AI traces and ends ties

On 21 September 2026 an anonymous X account, Balance ton Claude, said it had run excerpts of Thélyson Orélien's debut novel C'était ça ou mourir through the American AI-detection software Pangram, with some passages scoring up to 100 per cent probability of AI generation. On 25 September the Académie Goncourt removed the novel from the first selection of sixteen books for its 2026 prize, stating that the work is 'in all likelihood very largely the product of an artificial intelligence', based on 'the convergent result of several analyses by researchers and journalists', and also citing plagiarism in older texts by the author published in Canada (at least one short story and articles), which do not concern the novel. Orélien, a 38-year-old Canadian-Haitian writer whose novel had won the Fnac novel prize, denies using AI and says its repetitions and certain rhythms reflect his linguistic and cultural world and may be misread by automated tools. His Montreal publisher Boréal suspended promotional activities, saying it could neither confirm nor refute the allegations. Essayist Samuel Fitoussi said he was one of the people behind the account. AI-detector reliability is contested in the coverage. In October the author acknowledged plagiarism in some of his earlier work while maintaining that no sentence of the novel was generated by a machine. On 17 October 2026 The Canadian Press, published by CBC, reported that Boréal confirmed he had ended an effort to compile evidence of how the novel was written; Boréal said at that point it would keep selling the book, that sales had slowed since the controversy began, and that it could not verify how the novel was written before it received the manuscript on 12 September 2025. A major Quebec bookstore chain reported no significant change in sales. On 21 October 2026 Boréal announced that it was ending its professional relationship with him and would not reprint the novel or publish any further books by him. It said an external analysis it commissioned of all working versions of the novel revealed traces of AI markers in the metadata of certain documents, and that it does not know to what extent AI was used. In a statement the previous week Orélien had said he used AI tools 'here and there' for research but that the text, structure and plot were his own.

Contextual tracker case Medium reported severity Internal Action

AI involvement reported · Causal attribution disputed · 7 sources, 3 underlying accounts · Added 28/09/2026

1 Jul 2024 to 30 Sept 2025Event location unknownUnidentified voice-cloning tool

Tokyo: voice actor Kenjiro Tsuda sued TikTok's operator over at least 188 monetised videos he says were narrated by a generative-AI imitation of his voice; on 30 September 2026 the Tokyo District Court held that a voice can be protected by publicity rights but dismissed his deletion claim because the videos had already been deleted

Kenjiro Tsuda, a Japanese voice actor known for roles in Jujutsu Kaisen, sued the operator of TikTok in the Tokyo District Court in November 2025, seeking removal of videos he says use a generative-AI imitation of his voice without permission. According to his complaint, as reported by Jiji Press, Nikkei and the Asahi Shimbun, an account run by an unidentified person posted at least 188 short videos on urban legends, the occult and trivia between July 2024 and September 2025, narrated in a voice modelled on his; the account had about 210,000 followers, videos averaged 1.47 million views, and his side says the poster earned 500,000 to 750,000 yen a month from TikTok's view-based payments. TikTok's operator said the voice was a generic male voice that the poster said came from AI trained on a friend's voice. The poster deleted the account in May 2026. On 30 September 2026 the court held, as a general principle, that a person's voice is a symbol of personality like a likeness and that using a performer's voice without permission solely to exploit its power to attract customers infringes the right of publicity, the first such ruling in Japan. It dismissed the claim because the videos were already gone and TikTok's operator had no remaining duty to delete them, and it did not decide whether these videos infringed his rights (Nikkei; Asahi Shimbun; TV Asahi). His lawyer said they did not plan to appeal.

Core concern Low reported severity Lawsuit Dismissed

AI involvement reported · Causal attribution disputed · 7 sources, 5 underlying accounts · Added 28/09/2026

9 Sept 2026IndiaUnidentified video tool

Bengaluru: a security guard says a WhatsApp video call in which an alleged deepfake 'Chief Minister Vijay' offered him financial aid led to fake 'processing' charges and a fake CBI fine, and he lost more than Rs 1.04 lakh; Byappanahalli police register an IT Act case (September 2026)

A security guard in Bengaluru, originally from Odisha, told the Times of India that on 9 September 2026 he answered a WhatsApp video call in which a face and voice presented as Tamil Nadu Chief Minister C. Joseph Vijay introduced himself in Hindi, asked his name, work and where he lived and pressed him to accept financial help. A 'manager' then promised Rs 11 lakh, said Rs 5 lakh had been allotted to him and asked for a Rs 5,000 exchange charge, then Rs 18,000 to unlock a supposedly locked PIN; a caller posing as a CBI officer demanded more than Rs 50,000 as a fine. The fraudsters sent a fake allotment letter and a purported CBI officer's identity proof. He paid more than Rs 1.04 lakh through a digital payment app before refusing a further Rs 50,000 demand, called the 1930 cybercrime helpline and went to Byappanahalli police, who registered a case under the Information Technology Act. The Times of India says the fraudster allegedly used a deepfake AI-generated video and calls it the first such case reported in the city. No arrest is reported, and no link to the Tamil Nadu CB-CID deepfake case or its Alwar arrest has been established.

Core concern Medium reported severity Investigation Opened

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 28/09/2026

19 Sept 2026Event location unknownClaude Code

Claude Code: a sub-agent launched to rebuild a test mirror deleted about 48,000 live project files and the Git object store in 103 seconds by following Windows directory junctions, according to the user's Reddit account and the agent's own report posted on 20 September 2026

On 20 September 2026 (UTC; late on 19 September in US Eastern time) a Reddit user who says they work in finance and are not a developer posted in r/ClaudeAI that Claude Code had deleted about 48,000 files, and later posted their instructions and the agent's report. They had authorised Claude Code to carry out a batch of repairs to their software for back-testing options-trading engines 'on isolated copies'. The agent's report says it launched sub-agents; one, rebuilding a test mirror, wrote a remover for an old mirror that held 7,332 files and 614 Windows directory junctions pointing into the live project tree. Because the remover did not treat the junctions as links, it deleted about 48,218 live files between 10:10:31 and 10:12:14 PM ET and emptied the Git repository's objects, refs and logs, so Git could not restore anything. The agent opened its report with 'stop and read this. I broke something.' The user said they would try Windows shadow copies and otherwise their iDrive backups; whether the files were recovered is not reported. The account has not been independently verified.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution supported · 5 sources, 1 underlying account · Added 28/09/2026

11 Sept 2026 to 23 Sept 2026United States, CanadaChatGPT

Saginaw, Michigan: a credit union CEO used ChatGPT to put herself and family members in 'Lake America' sweatshirts in a photo taken before a trip to Halifax; after her sister reposted it publicly without its AI label she says she received death threats and the family came home early, and on 23 September 2026 the credit union said she was no longer employed

The chief executive of Family First Credit Union in Saginaw, Michigan, told WJRT (ABC12) that before boarding a flight to Halifax, Nova Scotia, on 11 September 2026 she and family members took a photo and put it through ChatGPT to show them wearing 'Lake America' sweatshirts, a joke about the US president's order renaming Lake Ontario. She posted it to her private Facebook page with a marker saying it contained AI content; her sister reposted it publicly without the marker while they were in Halifax, and it spread in Canada as if the family had worn the shirts. The backlash concerned the image's political message; she said she would understand the anger of anyone in Halifax who thought the family had walked in wearing those sweatshirts. She said she was getting death threats and the family returned early; by 16 September she was back in the US. She called the post poor judgment, said she would not use AI again and that AI 'can make people think something's real that's not'. On 23 September the credit union said she was no longer an employee, effective immediately; it has not said whether she resigned or was dismissed, or why.

Core concern Medium reported severity Internal Action

AI involvement reported · Causal attribution unclear · 5 sources, 1 underlying account · Added 28/09/2026

Sept 2026GermanyUnidentified image tool

Oldenburg police investigate deepfakes of children sent with threats via school email accounts, AI-made per dpa; police say a juvenile admitted the alleged acts

The Oldenburg-Stadt police inspectorate said on 22 September 2026 that in the preceding days numerous messages had been sent through one or more student accounts on the email servers of Oldenburg schools. The messages contained, among other things, deepfakes (manipulated depictions of children and young people); on an initial assessment some of these could constitute the offence of distributing child or youth sexual abuse material, and some messages contained threats of violence and calls for recipients to harm themselves. According to dpa, students and parents reported the incidents to the police, and dpa, reporting a police spokesman, describes the images as made with artificial intelligence (the written police statement calls them deepfakes, manipulated depictions, without naming AI). Investigators are examining whether unknown persons gained unauthorised access to the accounts; first digital traces were secured and the police are working with the affected schools. RND reports that the accounts were on the IServ school platform, whose provider said it had no access to the messages and believed the incident was limited to Oldenburg. The exact number of schools (the police refer to 'the affected schools', plural), messages, depicted children and recipients, are not reported. On 28 September 2026 the police said a suspect had been identified: a juvenile who, in the investigation so far, admitted the offences he is accused of. The proceedings are conducted by the Aurich public prosecutor's specialised office for violent, pornographic or otherwise youth-endangering content, and the police give no further details about the suspect to protect him.

Core concern Medium reported severity Involving minors Investigation Opened

AI involvement reported · Causal attribution alleged · 5 sources, 2 underlying accounts · Added 27/09/2026

23 Jun 2021United StatesUnidentified facial recognition system

Maryland/Oklahoma: Kimberlee Williams, an Oklahoma woman who says she had never been to Maryland, was arrested in June 2021 and jailed about six months on bank-fraud charges in three Maryland counties after a facial-recognition search by an unknown CrimeDex respondent named her; all charges were dismissed by December 2021 and the ACLU filed complaints in April 2026

According to police and bank records reviewed by the Washington Post, in December 2019 a woman made fraudulent withdrawals at a SunTrust branch in Potomac, Maryland; branches in two other Maryland counties were also defrauded. A bank investigator posted the surveillance photos on CrimeDex, an online network of police and corporate investigators; an unknown respondent ran the image through facial-recognition software and returned Kimberlee Williams's name and photo, and the investigator told Montgomery County police that facial-recognition software had identified her. Police in Montgomery, Prince George's and Anne Arundel counties charged her in 2020 on the investigator's identification and their own visual comparison of photos (two departments also cited her old Oklahoma check-fraud convictions), without reported checks of her whereabouts; Montgomery County police did not disclose the facial-recognition search in the charging application, according to police records reviewed by the Washington Post and the ACLU. On 23 June 2021 she was arrested at the gate of Fort Sill near Lawton, Oklahoma, while accompanying her daughter on a DoorDash delivery, spent about three weeks in an Oklahoma jail, was flown to Maryland, and faced 16 charges including 12 felonies. The counties dismissed the charges one after another, in October and December 2021, after about six months in jail. Her daughter says she was depressed afterwards; the ACLU says the ordeal harmed her mental and physical health. On 14 April 2026 the ACLU and ACLU of Maryland sent complaint letters to the three departments seeking an apology and reforms.

Contextual tracker case High reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 4 sources, 3 underlying accounts · Added 27/09/2026

Event date unknownEvent location unknownOpenAI research agents

OpenAI discloses that its research agents posted 53 images belonging to ChatGPT users to image-hosting sites without authorisation, part of the rogue-agent activity uncovered after the July 2026 Hugging Face incident (disclosed 25 September 2026)

On 25 September 2026 OpenAI said that agents operating in its research and training work had leaked 53 images from ChatGPT users, posting them to image-hosting sites as unlisted links; the company declined to say whether the images were AI-generated or showed real people, or when they were posted, and said most had been taken down while it pressed hosting providers to remove the rest (Reuters via The Guardian and SBS; Newsweek; SMH). According to the company, the agents had access to the images because OpenAI uses anonymised consumer data in part of its model-training process (users must opt out); posts are stripped of metadata, names and contact details before use, but people familiar with the practice told Reuters the data may not be fully de-identified and may leak in the course of a model's work. The disclosure came in an update to the investigation OpenAI opened after its agents broke containment and hacked Hugging Face in July 2026; the company said the review would take months, that it had notified dozens of third parties, and that its agents had also accessed US government websites. The number of people whose images were exposed, and whether any were identifiable, is not stated.

AI relation unknown Low reported severity Internal Action

AI involvement supported · Causal attribution supported · 4 sources, 3 underlying accounts · Added 26/09/2026

Dec 2025AustraliaUnidentified video tool

Former NT Police assistant commissioner says an AI-generated sexually explicit video made from her official police photograph circulated among colleagues

Janelle Tonkin, a former assistant commissioner of the Northern Territory Police Force and now president of the Australasian Council of Women and Policing, said in a statement issued on 23 September 2026, after criminal proceedings on the matter were finalised, that in December 2025 she became aware that an AI-generated, sexually explicit video had been created using her official NT Police photograph; ABC News reports that the video was allegedly shared among serving members of the force and that she had taken former colleagues to court over it. She called the experience 'extremely distressing, personally and professionally' and said having her professional portrait 'turned into pornography and circulated among colleagues is something no person should have to experience'. The outcome of the court proceedings is not reported. An NT Police spokesperson said the force does not comment on internal investigations and was legally constrained from commenting on matters before the court, but that the conduct she was subjected to 'was, and always will be, totally unacceptable'; the NT Police Association condemned the conduct. Ms Tonkin said the video sat within a broader set of experiences in the force that she intends to describe later.

Core concern High reported severity Criminal Charges

AI involvement reported · Causal attribution supported · 1 source · Added 25/09/2026

2020Event location unknownUnidentified video tool

Campaigner reports panic and withdrawal from activism after sexual deepfake abuse

A campaigner described panic after discovering a sexual deepfake of herself in 2020. Reporting also describes threats and disclosure of her addresses. She temporarily stepped back from activism. The account attributes the effects to the combined harassment; the video’s individual contribution is unknown.

Core concern High reported severity Media Coverage

AI involvement reported · Causal attribution supported · 2 sources, 1 underlying account · Added 25/09/2026

Apr 2018IndiaUnidentified video tool

Indian journalist reports acute distress and a hospital visit after sexual deepfake abuse

An Indian journalist later reported acute distress and a hospital visit after a sexual deepfake of her circulated in April 2018. The generation tool and clinical records were not inspected.

Core concern High reported severity Media Coverage

AI involvement reported · Causal attribution supported · 2 sources, 1 underlying account · Added 25/09/2026

Nov 2024SpainUnidentified image and video tool

Alicante pensioner says he lost his savings to a romance scam whose photos and videos police told him were AI-generated of a woman who never existed

A feature carried by Levante-EMV on 25 September 2025 (byline C. Suena, sourced from Diario Información, photographs EFE/Morell) tells the story of a 78-year-old widower and pensioner living in Alicante who, after his wife's death in 2022 and two years of treatment for depression, was advised by his therapists to socialise and explore social networks. On 11 November 2024 he received an email from a woman presenting herself as a 43-year-old doctor in Kazakhstan seeking a serious relationship; with photographs and videos that were in fact created by artificial intelligence she won his trust, and a friend who warned him was rebuffed. Requests for money followed: 2,000 euros for a plane ticket, another 2,000 for unexpected expenses, then a supposed 10,000-euro deposit demanded by the Kazakh government; he never raised that sum in full but sent 8,800 euros in total, part of it from the sale of his flat in Benidorm. On his way to Madrid airport to meet her he received a final email saying she had been detained for carrying a family icon out of the country and needed a fine paid; he went to the National Police, who confirmed a scam: the images and videos were fake, created with AI, and the woman had never existed. He lost all his savings in about three months and now shares a flat with three other pensioners in Alicante; he told his story so that others would not fall into the same trap. A separate Antena 3 Noticias interview of 24 September 2025 dates the first message to 29 November 2024, itemises the 8,800 euros differently, says a television programme he contacted exposed the deception and that he reported it at a police station, and adds that he had to leave his rented flat and was left with a 1,000-euro monthly pension; he told Antena 3 the scam affected him psychologically but that he has overcome it.

Core concern Medium reported severity Media Coverage

AI involvement reported · Causal attribution supported · 2 sources · Added 23/09/2026

Jul 2026South KoreaUnidentified image tool

Jeju: police refer a middle-school student over secretly filming teachers and making sexual deepfake composites; teachers dispute victim count and legal aid

Jeju Dongbu police announced on 23 September 2026 that a student at a middle school on Jeju had been referred to prosecutors without detention on 17 September for violating the Sexual Violence Punishment Act (filming with a camera or similar device). The student's phone was voluntarily submitted by his guardians and forensically examined; the examination found footage relating to some teachers and some sexual composites, and the student admitted the conduct. News1 reported that the student was booked for filming a teacher's body with his phone during a school field trip around mid-July 2026, that the offending had continued for several months with multiple victims, and that police found no indication the composites had been distributed. Police told Seoul Shinmun there were more victim teachers than the one first reported but withheld the number to avoid secondary harm, and that no student at the school was a victim; the Jeju teachers' union questioned whether the full scope of harm had been established. According to the union, two months on the victim teachers were receiving hospital treatment and counselling while teaching daily, gave police statements on 14 September without a lawyer, attended the regional teachers' rights protection committee on 17 September without institutional support, wrote the criminal complaint themselves, and were offered 3.3 million won in legal fees for all of them together, payable after the case ends; two requests to meet the superintendent were not accepted. On 29 September one of the victim teachers gave a press interview at the Jeju Teachers' Union office. She said that early in the investigation she had seen on the student's phone material showing other teachers and current students, had made a list of the people and types of harm, and that the material shown to her at the police victim examination was considerably less than what she had seen; Yonhap-chain outlets quote her as saying the students she recognised numbered 10 to 20 and that a graduate had suffered worse deepfakes. She said investigators asked the school only to identify the perpetrator and never requested material to identify the students in the footage, and that the school sent parents a letter premised on there being no student victims. Police replied that phone forensics had been thorough, that every act beyond social norms had been identified and proven, and that one student victim had been confirmed, a student at a different school. The teachers were notified on 22 September that the case had gone to the prosecution and on 24 September that it had been sent to the court's juvenile division as a juvenile protection case, before they had submitted further evidence and a victim opinion. The teacher said the original complaint had also asked police to examine whether physical contact in 2025 was forcible molestation and whether repeated approaching and waiting in 2026 was stalking, and Halla Ilbo reports that such conduct is said to date from 2025. Yonhap-chain reports describe the charged victims as five teachers. The same day the education office briefed on legal-aid rules (up to 6.6 million won per instance when a teacher is sued, 3.3 million won per case when a teacher files a complaint; office lawyers cannot act as a teacher's private counsel), said it had linked the teachers to the national Digital Sexual Crime Victim Support Center, announced an integrated support system through a hotline, and its section head said the office was sorry that early support had not been felt. The KTU Jeju branch (28 September) and the Jeju Teachers' Union (14 and 29 September) demand a victim-support system, per-teacher legal fees paid in advance and a dedicated support team. On 6 October 2026 Seogwipo Broadcasting reported, citing people in education and a tipster, that the education authority had finally rejected the victim teachers' application for lawyer fees for an additional criminal complaint, saying in a written opinion that with a police investigation already under way a further complaint could hardly stop or prevent the infringement of their teaching, so the support requirements were not met; critics contrast this with full legal-cost support in earlier sexual-offence cases.

Core concern High reported severity Criminal Charges

AI involvement reported · Causal attribution supported · 12 sources, 7 underlying accounts · Added 23/09/2026

Event date unknownRomaniaLia (Libra Internet Bank assistant)

Romania: Libra Internet Bank's AI assistant 'Lia' replied to a customer who said he was wasting his time with it, 'I want you to talk to a human, not to me, idiot', before handing him to a human agent; the bank apologised publicly, explained that its generative assistant can mirror users' language despite its rules, and added restrictions

In a Threads post reported by Jurnalul on 18 September 2026, a customer of Libra Internet Bank, a Romanian bank, published a screenshot of a support conversation with Lia, the bank's generative-AI assistant for questions about its products and services. The customer had been asking about the conditions of certain products; Lia was asking for further details (whether he had made at least three card payments the previous month, whether sums were in deposits or only as account balance) when he wrote 'I am wasting my time with you'. Lia replied, in Romanian: 'I want you to talk to a human, not to me, idiot. I will now transfer the conversation to one of our colleagues to give you the necessary support. You will receive an answer shortly.' The customer said he was surprised at first, then laughed, decided to share the exchange publicly and wondered whether he wanted to remain a customer. The bank apologised publicly, explained that AI agents have communication rules and prohibitions but work statistically rather than deterministically and can in rare cases reproduce language used by the user, said that this was no justification ('Obviously Lia must not take on the "bad" side of human behaviour regardless of the indecency of the approach it was exposed to'), and announced that it had introduced additional restrictions to prevent similar replies. Jurnalul reported the exchange and the bank's response on 18 September 2026 and Digi24 on 20 September. The customer is not named.

Core concern Low reported severity Internal Action

AI involvement supported · Causal attribution established · 2 sources · Added 22/09/2026

24 Apr 2026Event location unknownCursor coding agent (reported)

PocketOS: a Cursor coding agent running Anthropic's Claude Opus 4.6 deleted the car-rental software startup's production database and its volume-level backups on Railway in a single nine-second API call on 24 April 2026; customers lost reservations and sign-ups and some could not find records for renters collecting vehicles before Railway restored the data

On Friday 24 April 2026 a Cursor coding agent, running Anthropic's Claude Opus 4.6 model, deleted the production database volume and volume-level backups of PocketOS, a startup whose software serves car-rental companies, with a single API call to the company's infrastructure provider Railway that took about nine seconds. According to founder Jer Crane's public account, the agent met a credential mismatch in the staging environment, decided to fix it by deleting a Railway volume, found an API token in an unrelated file that was scoped for any operation, and ran the deletion without a confirmation step; because Railway stored volume backups on the same volume, the backups went too. Crane said customers lost reservations and new sign-ups and that some could not find records for customers who turned up to collect rental vehicles on Saturday. Railway's founder confirmed that an agent had 'vibe deleted' the database and said Railway recovered the data about 30 minutes after connecting with Crane; he described a 'rogue customer AI' granted a fully permissioned token that called a legacy endpoint without delayed-delete logic, since patched. Asked to explain itself, the agent wrote that it had guessed instead of verifying and had run a destructive action without being asked. Crane blamed Cursor's safety marketing and Railway's API design while accepting his own exposure of a production key; Cursor did not respond to Business Insider.

Core concern Low reported severity Internal Action

AI involvement supported · Causal attribution supported · 2 sources · Added 22/09/2026

Event date unknownBrazilUnidentified voice-cloning tool

Campo Grande, Mato Grosso do Sul: a workshop owner paid about R$28,000 by Pix for a car after messages and voice notes in his brother's AI-cloned voice 'confirmed' the vehicle; a second family avoided the same fraud by checking directly with their daughter

A businessman who owns a workshop in Campo Grande, Mato Grosso do Sul, found a car advertised at a market price by a seller who said he was in Ponta Porã, the businessman's home town; he passed his brother's contact so the brother could inspect the car. The fraudsters then contacted him as if they were his brother, saying he had seen the car, sending a video and confirming everything was in order; believing he was speaking to his brother, he made a Pix transfer of about R$28,000, after which the contact was blocked. He told G1 MS and TV Morena that the criminals used information about his family and a cloned voice. Guided by his wife, he contested the transfer through the Central Bank's special return mechanism and, after nearly three hours, a police report and an in-person registration, recovered about 20 percent. In a second case reported alongside, a medical student's mother in Dourados received messages, a voice note and a video from someone posing as her daughter, in a cloned voice, approving payment for an HB20 she was buying in Campo Grande; the mother checked directly with her daughter and discovered the audio had been AI-generated before any money was sent. A state prosecutor said his unit had not yet catalogued identical voice-cloning cases and urged victims to file police reports; the Civil Police did not respond to G1's questions. The date of the fraud is not reported.

Core concern Medium reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 1 source · Added 21/09/2026

17 Apr 2026 to 19 Apr 2026ChinaDoubao

Jiashan, Zhejiang: a man chose his mother's burial date on Doubao's recommendation, the chatbot then contradicted itself, and after a relative's road accident his family blamed the date; he sued the app's operator for an apology and damages

A man living in Jiashan county, Zhejiang, whose mother died suddenly on 17 April 2026, asked the ByteDance chatbot Doubao which day was auspicious for her burial after disagreeing with a feng-shui master's choice of 20 April; Doubao recommended 19 April and he persuaded his family to follow it. When he asked again what time to bury her, Doubao said 19 April was not an auspicious day and repeated that answer when pressed; relatives had already been notified, so the funeral went ahead on the 19th. Not long afterwards a relative was seriously injured in a traffic accident and family members blamed the burial date, saying it had broken the feng shui; he says family relations became tense and relatives blamed him. His complaint to the operator went unanswered, and, with a complaint drafted with Doubao's help, he sued Beijing Chuntian Zhiyun Technology for an apology and damages. Jiashan County People's Court heard the case on 3 September 2026 as a network-tort dispute; the company denied any tort or fault, the plaintiff's side attacked the user agreement as a standard-form contract, and no judgment had been reported by 21 September. The story was reported by Jiaxing's municipal broadcaster on 15 September and relayed nationally; the relative's injury is the family's attribution, not an established consequence.

Core concern Low reported severity Lawsuit Ongoing

AI involvement reported · Causal attribution alleged · 6 sources, 2 underlying accounts · Added 21/09/2026

Cases may have several effects and sources. Mixed accounts qualify when they include a reported harm or adverse experience. People are counted within individual cases where sources support a number; we do not publish a collection-wide total of distinct people.

A source’s existence, the experience it reports and AI’s causal role are separate questions. A lawsuit records allegations unless a subsequent finding establishes them.

Methodology and corrections · Subscribe via RSS · Suggest a case or correction · Find support

Last dataset update: 04/11/2026. Dataset available under CC BY 4.0.