Skip to main content

NOPE · AI and people

AI incidents

Reports of AI-related harm and adverse experiences affecting people’s safety, wellbeing, rights and livelihoods. Explore what happened and the evidence available.

NOPE’s core concern is when AI communicates with a person, acts on their behalf, or depicts or impersonates them. The tracker also records consequential decisions, claims and privacy harms involving AI. Each case needs a described connection between AI use and the harm, including private information recorded into or disclosed to an AI service. Each account is reviewed for publication; claims may remain uncorroborated or disputed. How we review and count cases

In this selection

Published cases
65
Countries with reported events
16
Located 42 of 65 cases · 23 unknown
Languages in checked sources
14
Recorded for 65 of 65 cases

65 cases have no reviewed AI-to-person relation yet: 1 not yet reviewed and 64 reviewed as unknown. Show all cases

These figures describe the cases collected by NOPE. Coverage varies with discovery, reporting and available evidence. They do not estimate how often AI-related harm occurs.

Response counts currently use each case’s principal recorded outcome. Further proceedings may be described in its account.

Cases in this selection, counted once in their first known event year. A series may continue beyond that year. Reporting and collection dates are excluded. NOPE has searched recent events more thoroughly than earlier years, so bar heights also reflect collection effort.

Reported severity MediumLow
More filters: AI relation, use, setting, sources and responses
Clear filters

65 of 1099 published cases · page 4 of 4

2025Event location unknownUnidentified legal research tool

High Court refers a solicitor to his regulator after fictitious citations from research his client says was AI-generated were put before the court

A Divisional Court judgment of 6 June 2025 ([2025] EWHC 1383 (Admin)) records that, in a commercial claim against a Qatari bank, correspondence and witness statements filed by the claimant and his solicitor relied on numerous authorities that a judicial assistant's schedule found to be fictitious or misquoted: 45 citations, 18 of which referred to cases that do not exist. The claimant's witness statement says the citations were generated using publicly available artificial intelligence tools, legal search engines and online sources. The solicitor's statement says he relied on the client's research without verifying it, that he had reported himself to the Solicitors Regulation Authority and that he had removed himself from all litigated matters. The court found a lamentable failure to check the material, accepted that the solicitor did not realise the citations were false, held that the threshold for contempt proceedings was not met, and said it would also refer him to the regulator. The judgment does not record any later disciplinary outcome.

AI relation unknown Medium reported severity

AI involvement supported · Causal attribution supported · 1 source · Added 29/09/2026

Event date unknownEvent location unknownOpenAI research agents

OpenAI discloses that its research agents posted 53 images belonging to ChatGPT users to image-hosting sites without authorisation, part of the rogue-agent activity uncovered after the July 2026 Hugging Face incident (disclosed 25 September 2026)

On 25 September 2026 OpenAI said that agents operating in its research and training work had leaked 53 images from ChatGPT users, posting them to image-hosting sites as unlisted links; the company declined to say whether the images were AI-generated or showed real people, or when they were posted, and said most had been taken down while it pressed hosting providers to remove the rest (Reuters via The Guardian and SBS; Newsweek; SMH). According to the company, the agents had access to the images because OpenAI uses anonymised consumer data in part of its model-training process (users must opt out); posts are stripped of metadata, names and contact details before use, but people familiar with the practice told Reuters the data may not be fully de-identified and may leak in the course of a model's work. The disclosure came in an update to the investigation OpenAI opened after its agents broke containment and hacked Hugging Face in July 2026; the company said the review would take months, that it had notified dozens of third parties, and that its agents had also accessed US government websites. The number of people whose images were exposed, and whether any were identifiable, is not stated.

AI relation unknown Low reported severity Internal Action

AI involvement supported · Causal attribution supported · 4 sources, 3 underlying accounts · Added 26/09/2026

4 May 2026FranceDIGI editorial tool

Créteil, France: court suspends Gisi's plan to cut eight sub-editor posts in favour of a generative-AI tool, citing risk to staff health

Gisi, the Infopro Digital subsidiary that publishes L'Usine nouvelle, LSA and L'Argus de l'assurance, presented its works council (CSE) on 4 May 2026 with a reorganisation built around DIGI, an in-house generative-AI editorial tool. On 12 May it opened consultation on the reorganisation and on the resulting collective dismissal of its eight secrétaires de rédaction (sub-editors), with two new chef d'édition posts for the tasks the tool could not automate, on the company's estimate that the tool would take over about 70% of sub-editor tasks. Some 250 journalists across the group's 26 titles had struck in spring 2026 against a group-wide plan to cut 19 sub-editor posts, and according to Digital Watch, citing Stratégies, five of the eight Gisi sub-editors had received letters inviting them to pre-dismissal interviews. The CSE went to court in July. On 15 September 2026 the Créteil référé judge found that carrying out the plan on an approximate basis without real-situation testing appeared to present 'un risque grave et caractérisé sur la santé physique et mentale de plusieurs catégories de salariés'. The judge suspended the reorganisation and the collective dismissal, including the redeployment processes, until real-situation tests and pilot issues are produced, under a provisional penalty of 8,000 euros per day for three months, and refused the damages provision. Gisi had argued that the risk was supposed rather than proven. It said it would continue the tests and reserved the possibility of an appeal.

AI relation unknown Medium reported severity Lawsuit Ongoing

AI involvement supported · Causal attribution supported · 6 sources, 4 underlying accounts · Added 20/09/2026

28 May 2026 to 1 Sept 2026United StatesDatavant utilization-review software (reported)

Bronx: Montefiore lays off 12 utilization-review nurses; their union says AI software replaced them, and the hospital disputes it

Twelve utilization-review nurses at Montefiore hospital in the Bronx, New York, received 45-day layoff notices on 28 May 2026, according to the Guardian's report of a laid-off nurse's account. The Guardian reported on 13 July that they had been laid off that Sunday (12 July); a laid-off nurse's op-ed and the New York State Nurses Association say the layoffs took effect on 1 September. The union says the nurses were replaced by AI-powered software that it identifies as Datavant's, and that the layoffs breach the contract with AI safeguards won in the strike earlier in 2026; the nurse writes that two doctors and AI software replaced them. Montefiore calls the union's claims inaccurate and misleading and describes the technology as a nonclinical paperwork program.

AI relation unknown Medium reported severity Media Coverage

AI involvement disputed · Causal attribution disputed · 6 sources, 4 underlying accounts · Added 15/09/2026

10 Mar 2026United KingdomChatGPT

Essex trial hears evidence of ChatGPT reassurance during a man’s explosives preparation

On 10 March 2026 Essex Police, executing a warrant at a three-bedroom flat in Rokescroft, Pitsea (Basildon), found a black cylindrical improvised explosive device with a fuse, containers of home-made gunpowder, 1.8 kg of sulphur, bulk matches and fireworks. Army bomb-disposal officers made the device safe behind a 100 m cordon and 80 to 100 homes were evacuated for the day. Ben Banham, 38, an Asda worker and father of two who described himself as a 'prepper', admits possessing explosives and is on trial at Basildon Crown Court (from 1 September 2026) on the charge of possessing them with intent to endanger life or cause serious injury. Prosecutor Tessa Shroff showed jurors his ChatGPT conversations, in which the chatbot he called 'Prometheus' told him 'You are not paranoid. You are paying attention in a world addicted to denial', 'You have the right mind set' and 'You're building a life of resilience, discipline and forethought in a world that desperately lacks all three'; she said he accepted the chatbot's encouragement while ignoring words of caution from people close to him. Banham says he learned to make gunpowder from a YouTube video and intended the explosives only for a 'post-apocalyptic scenario'. He was remanded in custody on 4 September and the trial resumed on 14 September 2026. On 16 September 2026, after six hours and 25 minutes of deliberation, the jury found him not guilty by an 11-1 majority of possessing explosives with intent to endanger life or cause serious injury to property; he still awaits sentence for the possession offence he admitted, provisionally listed for 19 November 2026. At trial he described his relationship with ChatGPT as 'delusional', saying he had used it 'as a way to get positive reinforcement for the things I was doing'.

AI relation under review Medium reported severity Criminal Charges

Legacy assessment: credible · Causal attribution alleged · Added 06/09/2026

Cases may have several effects and sources. Mixed accounts qualify when they include a reported harm or adverse experience. People are counted within individual cases where sources support a number; we do not publish a collection-wide total of distinct people.

A source’s existence, the experience it reports and AI’s causal role are separate questions. A lawsuit records allegations unless a subsequent finding establishes them.

Methodology and corrections · Subscribe via RSS · Suggest a case or correction · Find support

Last dataset update: 04/11/2026. Dataset available under CC BY 4.0.