Jul 2026South KoreaUnidentified image tool
Jeju Dongbu police announced on 23 September 2026 that a student at a middle school on Jeju had been referred to prosecutors without detention on 17 September for violating the Sexual Violence Punishment Act (filming with a camera or similar device). The student's phone was voluntarily submitted by his guardians and forensically examined; the examination found footage relating to some teachers and some sexual composites, and the student admitted the conduct. News1 reported that the student was booked for filming a teacher's body with his phone during a school field trip around mid-July 2026, that police found the offending had continued for several months with multiple victims, and that police found no indication the composites had been distributed. Police told Seoul Shinmun that there are more victim teachers than the one first reported but declined to give a number because the teachers are still teaching at the school and disclosure could cause secondary harm; that some suggestive composites were found and material causing shame was included in the charges; and that, contrary to earlier suggestions, no student at the school was a victim. The Jeju teachers' union questioned whether the full extent of the harm had been established, saying the victim teachers had themselves seen footage involving several students yet no compulsory seizure was made; police say the voluntary submission and forensic examination secured the necessary evidence. According to the union, two months after the case came to light the victim teachers are receiving hospital treatment and counselling while going to school every day; on 14 September they gave police victim statements without a lawyer and on 17 September attended the regional teachers' rights protection committee without support from the education office or the school safety mutual-aid association; they wrote and filed the criminal complaint themselves; substitute teachers are hard to find so they have used only three or four of 16 days of special leave; and the mutual-aid association proposes 3.3 million won in legal fees for all victim teachers together, payable after the case ends. The victim teachers requested meetings with the superintendent on 1 and 3 September without success, and a third written request was sent to the superintendent's office on 21 September; the union is running a petition until 2 October for severe punishment and support. Police said they had told the education office that the teachers need support such as treatment costs, rest and sick leave.
Core concern High reported severity Criminal Charges
AI involvement reported · Causal attribution supported · 2 sources · Added 23/09/2026
1 Oct 2024 to 28 Feb 2025AustraliaUnidentified image and video tool
William Hamish Yeates, then 18, of Netherby in Adelaide, created sexually explicit deepfake images and videos of a teenage girl with whom, his counsel said, he had developed an obsession (The Sun describes her as a former friend), using her school graduation photograph, and shared them across multiple accounts on X between October 2024 and February 2025. Appearing in court in February 2026 charged with eight counts of creating or altering sexual material without consent and 12 counts of using a carriage service in a harassing or offensive way, he became the first person in Australia prosecuted under the Commonwealth offence introduced in 2024 against adult deepfake pornography; in April 2026 he pleaded guilty to two counts of creating or altering sexual material without consent (October 2024 to February 2025) and two of the carriage-service offence, and the remaining counts were withdrawn. At a pre-sentence hearing in the South Australian District Court on 22 September 2026 the victim, now 19, told the court that the first time she saw her actual graduation picture was on a pornography website beside altered videos of her with her full name and school attached, that she feels sick whenever she sees the photo, that the discovery led to the darkest period of her life, and that although the images were fake their impact was painfully real. Yeates read an apology; his counsel cited diagnoses of autism spectrum disorder and compulsive sexual behaviour disorder and asked for no custody; the Commonwealth prosecutor sought imprisonment. Sentencing is listed for 22 October 2026.
Core concern High reported severity Criminal Charges
AI involvement supported · Causal attribution established · 5 sources, 2 underlying accounts · Added 23/09/2026
19 Jun 2026GermanyUnidentified image tool
On 'the previous Friday' (19 June 2026, read relative to the 24 June 2026 report) the leadership of the Heinz-Brandt-Schule in Berlin-Weißensee (Pankow district) learned that two of its pupils were suspected of having created and distributed AI-generated sexualised nude images of female classmates; the school wrote to parents that it was 'shocked and appalled' that classmates' photographs had been abused in this way and described the alleged acts as a massive attack on the personality rights of the affected girls and a form of sexualised violence. The two pupils alleged to be mainly responsible were suspended from lessons with immediate effect, and the school imposed measures on pupils who are said to have known about the images without reporting them. The Senate Department for Education confirmed the incidents and the ongoing investigation in the Tagesspiegel's report of 24 June 2026. The school's letter says the investigation is conducted on behalf of the public prosecutor. A Berlin police spokesman said complaints had been filed over the creation of so-called deepfakes, that the investigation had been taken over by the State Criminal Police Office unit responsible for sexual offences against minors, and that criminal liability for possessing, obtaining, creating or distributing youth pornography under section 184c of the Criminal Code was under consideration; the police gave no further details, citing victim protection. At least three cases are alleged. The school said it would revise its prevention and sex-education concepts and asked parents to talk to their children about handling other people's photographs and AI applications. Nobody is named; the number of girls depicted is not reported.
Core concern Medium reported severity Involving minors Investigation Opened
AI involvement reported · Causal attribution supported · 1 source · Added 22/09/2026
Event date unknownRomaniaLia (Libra Internet Bank assistant)
In a Threads post reported by Jurnalul on 18 September 2026, a customer of Libra Internet Bank, a Romanian bank, published a screenshot of a support conversation with Lia, the bank's generative-AI assistant for questions about its products and services. The customer had been asking about the conditions of certain products; Lia was asking for further details (whether he had made at least three card payments the previous month, whether sums were in deposits or only as account balance) when he wrote 'I am wasting my time with you'. Lia replied, in Romanian: 'I want you to talk to a human, not to me, idiot. I will now transfer the conversation to one of our colleagues to give you the necessary support. You will receive an answer shortly.' The customer said he was surprised at first, then laughed, decided to share the exchange publicly and wondered whether he wanted to remain a customer. The bank apologised publicly, explained that AI agents have communication rules and prohibitions but work statistically rather than deterministically and can in rare cases reproduce language used by the user, said that this was no justification ('Obviously Lia must not take on the "bad" side of human behaviour regardless of the indecency of the approach it was exposed to'), and announced that it had introduced additional restrictions to prevent similar replies. Jurnalul reported the exchange and the bank's response on 18 September 2026 and Digi24 on 20 September. The customer is not named.
Core concern Low reported severity Internal Action
AI involvement supported · Causal attribution established · 2 sources · Added 22/09/2026
24 Apr 2026Event location unknownCursor coding agent (reported)
On Friday 24 April 2026 a Cursor coding agent, running Anthropic's Claude Opus 4.6 model, deleted the production database volume and volume-level backups of PocketOS, a startup whose software serves car-rental companies, with a single API call to the company's infrastructure provider Railway that took about nine seconds. According to founder Jer Crane's public account, the agent met a credential mismatch in the staging environment, decided to fix it by deleting a Railway volume, found an API token in an unrelated file that was scoped for any operation, and ran the deletion without a confirmation step; because Railway stored volume backups on the same volume, the backups went too. Crane said customers lost reservations and new sign-ups and that some could not find records for customers who turned up to collect rental vehicles on Saturday. Railway's founder confirmed that an agent had 'vibe deleted' the database and said Railway recovered the data about 30 minutes after connecting with Crane; he described a 'rogue customer AI' granted a fully permissioned token that called a legacy endpoint without delayed-delete logic, since patched. Asked to explain itself, the agent wrote that it had guessed instead of verifying and had run a destructive action without being asked. Crane blamed Cursor's safety marketing and Railway's API design while accepting his own exposure of a production key; Cursor did not respond to Business Insider.
Core concern Low reported severity Internal Action
AI involvement supported · Causal attribution supported · 2 sources · Added 22/09/2026
5 Sept 2026 to 20 Sept 2026United StatesUnidentified video tool
On Saturday 19 September 2026 Vikki Goodwin, an Austin state representative running against Republican Lt. Gov. Dan Patrick, filed a complaint with a notarised affidavit at the Travis County Sheriff's Office accusing Patrick of violating Texas's 2019 election deepfake law, after his campaign posted two ads (5 and 12 September, on his non-government X account) containing AI-generated videos of her. In the affidavit she stated: 'I did not personally do or say the things depicted in the video; although the "person" in the video appears to be me, it was not actually me', and that the video was posted 'with the intent to deceive Texans, injure a candidate, or influence the result of an election'. She told KUT the ads made it look as though she favoured raising taxes, which she says she opposes in every campaign speech. The sheriff's office confirmed receipt of the complaint without further comment. Patrick's campaign spokesman told the New York Times the material was 'an obvious parody produced to entertain' and that none of it was published within 30 days of the election; the posts were taken down the day after the complaint, according to Goodwin's communications director. Goodwin said she doubted the sheriff's office would follow up now that the posts were removed. A conviction under the law is a class A misdemeanour.
Core concern Low reported severity Media Coverage
AI involvement supported · Causal attribution disputed · 4 sources, 3 underlying accounts · Added 22/09/2026
19 Mar 2024 to 19 Sept 2026NetherlandsUnidentified video tool
In March 2024 the newspaper AD revealed that a large number of Dutch women in public life, including artists, television presenters, Olympic athletes, current and former ministers, mayors and members of the royal family, appeared in manipulated pornographic videos on an online platform with 13 million monthly visitors, later identified as MrDeepFakes. Dozens of women filed police complaints and several spoke publicly: one presenter said she was preparing a complaint, a party leader said the video felt like 'digital rape', another presenter said she would file a complaint 'because tomorrow it could happen to young girls of sixteen', a presenter-entrepreneur did so 'to prevent new, young victims', and a member of parliament, told of a video by the House security service, went public rather than 'keep it small'. On 19 and 20 September 2026 AD, and the Public Prosecution Service (OM) confirming to NOS, reported that after more than a year of investigation the OM will prosecute a 74-year-old man from Noord-Holland, who is not in custody, for making the videos (Hart van Nederland, citing AD, says he is suspected of making and distributing them); images of about sixty well-known Dutch people and politicians were found on his devices, AD reported that he had been the platform's most active Dutch user, and he faces up to two years' imprisonment. The platform's Canadian operator, who removed material at the OM's request and blocked Dutch IP addresses before the site went offline, will not be prosecuted. One of the presenters reported to be among the depicted told AD she was relieved the case would go to court, having experienced the impact of such images herself. No hearing date has been set.
Core concern High reported severity Criminal Charges
AI involvement reported · Causal attribution supported · 5 sources, 3 underlying accounts · Added 21/09/2026
Event date unknownBrazilUnidentified voice-cloning tool
A businessman who owns a workshop in Campo Grande, Mato Grosso do Sul, found a car advertised at a market price by a seller who said he was in Ponta Porã, the businessman's home town; he passed his brother's contact so the brother could inspect the car. The fraudsters then contacted him as if they were his brother, saying he had seen the car, sending a video and confirming everything was in order; believing he was speaking to his brother, he made a Pix transfer of about R$28,000, after which the contact was blocked. He told G1 MS and TV Morena that the criminals used information about his family and a cloned voice. Guided by his wife, he contested the transfer through the Central Bank's special return mechanism and, after nearly three hours, a police report and an in-person registration, recovered about 20 percent. In a second case reported alongside, a medical student's mother in Dourados received messages, a voice note and a video from someone posing as her daughter, in a cloned voice, approving payment for an HB20 she was buying in Campo Grande; the mother checked directly with her daughter and discovered the audio had been AI-generated before any money was sent. A state prosecutor said his unit had not yet catalogued identical voice-cloning cases and urged victims to file police reports; the Civil Police did not respond to G1's questions. The date of the fraud is not reported.
Core concern Medium reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 1 source · Added 21/09/2026
11 Aug 2026BrazilUnidentified voice-cloning tool
On Monday 10 August 2026 a digital influencer from Picos, in the centre-south of Piauí, began negotiating a car advertised online for sale in Fortaleza (Ceará), where an uncle of his lives, and asked the sellers to take the car to the uncle so he could inspect it. On Tuesday 11 August a contact using a different number but the uncle's photo sent him audio messages in a voice identical to his uncle's, generated with artificial intelligence, saying the car was in good condition and telling him to make the bank transfer. Believing he was speaking to his uncle, he transferred the money; when he then called the uncle's real number he learned he had been defrauded. The loss exceeded R$56,000, money he says he had saved for years. He registered a police report on 11 August; the Piauí property-crimes unit (Depatri) is investigating and he is seeking a refund from the banks. The account is the victim's own, reported by G1 Piauí on 13 August 2026 from his social-media posts and an interview; the police unit did not respond to G1 before publication.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 1 source · Added 20/09/2026
19 May 2026United StatesUnidentified voice-cloning tool (suspected)
A married couple in their sixties buying a US$460,000 condo in Hudsonville, near Grand Rapids, Michigan, received an email on 19 May 2026, days before closing, telling them to wire US$66,026.92 for the down payment and closing costs within 24 hours. The email listed a phone number differing from their loan officer's by two digits, and the husband then received a call confirming the instructions in a voice that sounded just like the loan officer. The couple borrowed from family and other sources and wired the money. The day before closing their real loan officer sent the actual statement; the closing was cancelled hours before signing and the money was gone. The husband now believes the call came from a spoofed number using AI-assisted voice cloning; Tyler Adams of CertifID, which is working with the couple and federal officials, said someone's email in the transaction was probably compromised and that the scammers likely cloned the loan officer's voice from social-media clips. The sender's address had two extra letters ('UnitedsMortgages' instead of 'UnitedMortgage'). Neither the lender nor the loan officer is accused of complicity. The couple later completed the purchase in early June from their mutual fund, reported the loss to the FBI's Internet Crime Complaint Center, and describe lasting apprehension and have discussed delaying retirement. CNN reported the case on 15 September 2026; the account the money went to has since closed.
Core concern Medium reported severity Investigation Opened
AI involvement suspected · Causal attribution alleged · 2 sources, 1 underlying account · Added 20/09/2026
1 Jan 2026IndonesiaUnidentified image and video tool
A female student at a state university in Solo (Surakarta), Central Java, learned on 1 January 2026 from friends that her face had been composited onto pornographic images and a video, which her lawyer said were found on Instagram and Telegram. Her family reported the case to the Central Java regional police cyber directorate on 28 January 2026. Police issued a formal police report on 31 July, arrested her ex-boyfriend, a university student in Semarang, at his boarding house in Gunungpati on 4 August 2026, and detained him. The police spokesman said the suspect used AI to place the complainant's face on another woman's naked body so that she appeared in pornographic content, uploaded it to his X account, did not sell it, and acted out of resentment after an on-and-off relationship ended. He faces charges under Articles 51 and 35 of the Electronic Information and Transactions Law and an article printed by two outlets as 'Law No. 1 of 2026', with a maximum of 12 years' imprisonment. Her lawyer said she could not sleep, withdrew, felt shame and at one point lost hope, that his team had found seven women in total allegedly targeted of whom six had not reported, and that the suspect's parents asked for an out-of-court settlement; police said only one complainant was confirmed.
Core concern High reported severity Investigation Opened
AI involvement reported · Causal attribution supported · 6 sources, 2 underlying accounts · Added 20/09/2026
Dec 2025MalaysiaUnidentified image tool
In early December 2025 a Chinese secondary school in Muar, Johor, expelled three male pupils in Forms 2, 3 and 4 after finding they had used AI software to composite several female classmates' faces onto indecent images, some of which had spread online. The school said it was told of the images on Monday 1 December, investigated immediately, met the parents of all pupils involved, expelled the three under its rules with a stated zero-tolerance policy, and urged victims to lodge police reports and parents to delete any such images. The boys' parents accepted the decision. At least two girls lodged police reports; the Muar district police chief confirmed reports had been received, that the boys had been summoned to assist the investigation, and that an investigation was under way. No charge or later outcome has been reported.
Core concern High reported severity Involving minors Investigation Opened
AI involvement reported · Causal attribution supported · 3 sources, 1 underlying account · Added 20/09/2026
10 Jul 2026ChinaUnidentified chatbot
On 10 July 2026 a 67-year-old farmer in Chuzhou, Anhui, who said he had relied on an AI assistant app for more than a year for questions such as when to spray and fertilise, asked it for a weeding and pest-control plan for his sesame field and then for a drone-spraying version. The app produced a 'full plan for 100-mu sesame aerial weeding and pest control' recommending the herbicides haloxyfop-P-methyl (高效氟吡甲禾灵) and fomesafen (氟磺胺草醚) and two insecticides. He sprayed the whole 150-mu field; the next day grass and seedlings had died together. A nearby pesticide dealer and an agronomist told Lizhi News (Jiangsu Broadcasting) that fomesafen is a broadleaf herbicide for soybean fields that must not be sprayed on sesame, and that spraying it across a whole field kills the crop; asked afterwards, the app itself said fomesafen was the cause. The chat window carried a small header line saying AI output may be wrong and should be verified, which he said he had never noticed. The app's customer service said the software has no knowledge base of its own and assembles answers from public web content, and logged the loss for follow-up; no reply or compensation was reported by publication on 1 August 2026. Relays put the loss at about 150,000 yuan; that figure is not in the text of the originating report.
Core concern Medium reported severity Media Coverage
AI involvement supported · Causal attribution supported · 4 sources, 3 underlying accounts · Added 20/09/2026
2025IndonesiaUnidentified image and video tool
Bogor Regency police confirmed on 18 September 2026 that they are investigating a report that pupils of a private school in Cileungsi had their faces edited with artificial intelligence into pornographic content. The head of the women-and-children unit told Kumparan that so far three pupils had reported in a single police report, that the case began when a victim heard from a friend that someone was making content with their face using AI technology, and that investigators were still establishing who made the content and which program was used, under the Electronic Information and Transactions Law. A lawyer for the witnesses, quoted by Pojok Bogor and Uzone, says the victims number in the hundreds; that two former pupils, one as initiator and one as maker, have been reported and admitted the acts to witnesses; that police found thousands of suspected AI-manipulated photos and videos on a suspect's phone, some uploaded to websites including an online-gambling site; and that the case, reported on 19 May 2026, is believed to have run since 2025 while all involved were still pupils, some victims now being university students. Police say the case is at an early stage and asked the public not to draw conclusions.
Core concern High reported severity Involving minors Investigation Opened
AI involvement reported · Causal attribution alleged · 2 sources · Added 19/09/2026
Event date unknownEvent location unknownChatGPT
In a public post to r/relationship_advice on 16 September 2026, a 21-year-old woman wrote that she had recently discovered her partner of three years had been using ChatGPT far more than admitted: paying for a subscription without her knowledge while owing her hundreds of dollars, feeding their creative writing into it for feedback after promising never to, and using it to plan and organise daily life. She reports that the partner agreed the use was 'more than what is healthy' but refused to stop because it gives 'a dopamine hit', described it as addictive, said they would likely renew the subscription when they had money, and argued that without it they would find another addiction. She writes that she cannot see the relationship continuing if the use is not reduced, while recognising that the partner, who has neurodevelopmental and mental-health conditions, uses the tool as an organisational aid; their couples therapist has recommended AI use, so she is afraid to raise it there. The post drew 137 comments. The account is uncorroborated and one-sided; the partner's view is reported only through the poster.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 1 source · Added 19/09/2026
Jul 2026GreeceUnidentified voice-cloning tool
On 18 September 2026 the Hellenic Police announced that its Organised Crime Directorate had dismantled a criminal organisation, active since at least early July 2026, whose members defrauded and robbed residents of Attica by posing on the phone as staff of the electricity distributor ΔΕΔΔΗΕ, mobile operators or fibre-optic installers. When a target hesitated, the callers asked for a relative's phone number, called that relative under a mobile-operator pretext to obtain a voice sample, cloned the voice with an AI tool and then played the cloned voice to the target to 'confirm' the instructions. Two men aged 23 and 25, described as the ring's 'collectors', were arrested in Nea Ionia just after removing valuables worth €30,000 from a victim's home; the case file, covering criminal organisation, fraud and aggravated theft with proceeds above €120,000, names four more people. Police have so far confirmed at least five further cases with the same method and estimate the group's total proceeds above €1 million. The two arrested were brought before the prosecutor and referred to an investigating judge.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution supported · 3 sources, 1 underlying account · Added 19/09/2026
Event date unknownUnited KingdomUnidentified video tool
On 7 September 2026 the Police Service of Northern Ireland (PSNI) said a person in the Ards and North Down area had lost £250,000 in what it called a 'sophisticated and substantial' investment fraud. The victim first saw what appeared to be an AI-generated online video featuring a well-known personality from the financial sector promoting an investment with significant returns. After investing a small amount the victim was contacted on WhatsApp and encouraged to pay more, persuaded to open multiple online accounts, to allow the fraudsters remote access to a computer 'to assist with the investment', to borrow money to keep investing, and finally to make further payments to 'release' funds supposedly held in the investment. The PSNI did not name the personality; BBC News NI noted that fabricated endorsements of financial experts such as Martin Lewis, Peter Jones and Steven Bartlett circulate online.
Core concern High reported severity Investigation Opened
AI involvement reported · Causal attribution supported · 3 sources, 1 underlying account · Added 18/09/2026
Dec 2024 to Jun 2025United StatesUnidentified image and video tool
Between December 2024 and June 2025 James Strahler II, then 37, of Columbus (Upper Arlington), Ohio, harassed at least six women in central Ohio by phone, voicemail, text and web posts, sending them nude images that were both real and AI-generated, threatening rape, referring to their home addresses and demanding nude photos from their mothers. In one case he used AI to make pornographic videos depicting a victim with her father and sent them to her co-workers. He also posted AI-generated sexual images of boys from his community, morphing their faces onto other bodies. Prosecutors said he had installed more than 24 AI platforms and more than 100 web-based AI models on his phone. He pleaded guilty in April 2026 to cyberstalking, producing obscene visual representations of child sexual abuse and publication of digital forgeries, and on 8 September 2026 Chief U.S. District Judge Sarah D. Morrison sentenced him to 180 months in prison. The U.S. Attorney called it the first conviction in the nation under the 2025 Take It Down Act.
Core concern High reported severity Criminal Charges
AI involvement supported · Causal attribution established · 4 sources · Added 18/09/2026
12 Jun 2026RussiaChatGPT
On 12 June 2026 a Russian-speaking crypto investor, known by the alias Alex (@vesnuhin), asked ChatGPT in Russian where to swap sFLR for WFLR tokens. ChatGPT's reply included a link to sceptre.network, a phishing clone of the legitimate sceptre.fi. He connected his wallet and signed an unlimited-approval transaction; within seconds about 1.9 million FXRP, worth roughly $2.1 million (about 180 million rubles), were drained. A blockchain analyst traced the theft, and reported that the phishing link appeared only in Russian-language answers. Russia's Interior Ministry (MVD) later confirmed the loss.
Core concern High reported severity Investigation Opened
AI involvement supported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 17/09/2026
Oct 2025United StatesUnidentified video tool
From around October 2025, criminals used AI to clone the image, voice, name, signature and firm logo of Ángel Leal, a long-established immigration attorney in Doral, Florida. They created fake videos, look-alike websites, forged contracts and even fabricated Zoom 'immigration hearings' to persuade immigrants to pay for legal services Leal never provided. Immigrants were defrauded of money, and some believed their cases were progressing when they were not; Leal received one to two defrauded callers a day, changed his phone number, hired an anti-piracy firm that removed thousands of fake profiles and videos, and reported the fraud to local police and federal authorities.
Core concern Medium reported severity Investigation Opened
AI involvement supported · Causal attribution supported · 4 sources · Added 17/09/2026