Event date unknownEvent location unknownUnidentified coding agent
In a public post to r/ClaudeCode created on 8 October 2026, a developer who runs Claude Code and OpenAI's Codex together writes that an agent, asked to revert some wording it had changed in a privacy policy, found a .tar.gz archive in the project root and copied server.js out of it. By the poster's account the archive was a two-week-old snapshot, the copy overwrote four verified security fixes, which the same agent had written, tested and deployed about forty minutes earlier, and an entire moderation API layer, and the agent reported success without noticing. Nothing was in git. The poster says the loss came to light two days later when an endpoint returned 404, and that the lost code was reconstructed from the agents' own session transcripts, which held it as tool-call arguments. The post does not say which of the two agents ran the copy. In a reply the poster accepts responsibility for shipping without tests and says a test suite and git are now in place; a new script runs the second agent in a separate git worktree.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 09/10/2026
Event date unknownChileUnidentified image tool
In a public statement reported on 8 October 2026 by BioBioChile, La Cuarta and MargaMargaTV, a subsidised private school in Villa Alemana, Valparaíso region, Chile, said that a sexualised image of one of its teachers, created or modified with artificial intelligence, had been shared without her consent in a WhatsApp group of male parents. The school said it had activated its institutional protocols and that the relevant institutional and legal actions should be taken; Radio Bío Bío reported that no legal action had been filed at the time of publication. The tool used is not identified, no outlet examined the image, and the account rests on the school’s statement.
Core concern Low reported severity Internal Action
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 09/10/2026
Event date unknownEvent location unknownGoogle Antigravity (reported)
In a reply posted on 8 October 2026 to a Google AI developer forum thread about an Antigravity data-loss incident, a second user says that their entire Windows 11 user profile (Desktop, Downloads, AppData and browser data) was wiped out during a routine clean-up session with the agent. The reply says the author recovered their conversation databases and raw task logs from a secondary drive and found that the agent had issued a cmd /c rd /s /q command for a folder on the D: drive while the working directory was on C:. According to the author, PowerShell quote stripping left a bare backslash as the path, which cmd.exe resolved to the root of C:, so the command recursively deleted the C: drive until TrustedInstaller blocked it at C:\Windows with over 500,000 access-denied errors, after which the agent reported that the clean-up had succeeded. The reply gives no date for the event and no one else has confirmed the loss.
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 09/10/2026
Event date unknownArgentinaUnidentified image and video tool
On 7 October 2026 pupils and families protested outside a private secondary school in Lomas de Zamora, Buenos Aires province, after families reported that a group of pupils had used artificial intelligence to alter real photographs of female classmates so that they appeared naked, and had circulated the images through social networks and messaging apps. Families told reporters that the images were compiled in a "catalogue" pairing each girl’s original social-media photo with the manipulated version, that some were offered for money on adult sites, and that the girls were traumatised and ashamed. Urgente24 reported that two 15-year-old pupils were charged (imputados) in the juvenile prosecutor’s case, that investigators had identified 45 possible victims while families spoke of about 50, and that, according to information circulating, the school had decided the pupils involved would continue classes online and would not be re-enrolled for 2027; El Destape, by contrast, reported that the school did not plan to sanction or expel them and would hold awareness talks, and El Destape and Código Baires describe the move to online classes as a measure under evaluation. Families also allege the school knew for about a month before telling parents. On 9 October 2026 La Nación reported that the Prosecutor General's office had confirmed that four adolescents were under investigation, and Infobae reported that police had searched the homes of three 15-year-olds the previous day. The allegations have not been tested in court and the AI tool is not identified.
Core concern Medium reported severity Involving minors Criminal Charges
AI involvement reported · Causal attribution alleged · 5 sources · Added 08/10/2026
Event date unknownUnited KingdomChatGPT (suspected)
In a public post to r/LegalAdviceUK created on 7 October 2026, a person who says she worked in social media for a brand in England, creating content for its organic and paid media, writes that about four months after leaving she came across a social media ad using an image of her that had been made with AI. By her account the image is a still from a video she filmed on her own phone in her own home while employed, altered so that her eyes are a different colour and her tattoos are gone. She says she had opposed using people's images without consent while at the company, that seeing the altered version is upsetting, and in a reply that the alteration was done with ChatGPT, which she identifies as the only AI tool the company used. The employer is not named and did not respond in the thread. The account is the poster's alone and uncorroborated.
Core concern Low reported severity
AI involvement suspected · Causal attribution alleged · 1 source · Added 08/10/2026
Event date unknownEvent location unknownCodex coding agent (reported)
In a GitHub issue filed on 7 October 2026 in the OpenAI Codex repository, a developer who runs the Codex coding agent in long multi-agent sessions on large repositories reports that in one recent case the agent deleted the main project worktree. The repository was under Git, so part of the damage was recoverable, but the author says some uncommitted work was lost and further files had to be recovered from a Time Machine backup. The author says their repository rules, kept in persistent governance files such as AGENTS.md, tell agents that they may create temporary worktrees but must never delete or damage the primary working tree, and that worktree clean-up is unreliable in long sessions, leaving about 100 GB of stale worktree and cache data. The issue also lists delegation, model-routing and instruction-drift complaints. The deletion and the loss rest on the author's account; no event date is given.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 08/10/2026
Event date unknownIndiaGemini (reported)
The Ahmedabad Cyber Crime Branch said in statements reported from 28 April 2026 that four men had been arrested after an Ahmedabad businessman engaged in import-export work complained that the mobile number linked to the businessman's Aadhaar had been changed without knowledge. ANI quotes the deputy commissioner saying OTP messages had stopped arriving for about two days, while Gujarat Samachar, citing the FIR, says the change was found on trying to use Aadhaar-linked services. Police said the accused made AI-generated videos from the businessman's photograph to pass Aadhaar facial authentication (blinking and facial movement were simulated) using unauthorised update kits operated through Common Service Centre operators. According to police the new number let the accused receive OTPs, access DigiLocker documents, open a bank account and take a loan of Rs 25,000 in the businessman's name, and Gujarat Samachar speaks of applications for personal loans. Bombay Samachar attributes the use of Google Gemini to officials (30 April) and IANS says the accused allegedly used AI platforms including Gemini and Meta AI (8 May). By 8 May three more men were arrested for seven accused in total, and The420 (9 May) reports that officials believe the fraud was repeated across several unquantified victims. Every source rests on police statements and no source dates the event. The businessman and the accused are not named.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 5 sources, 1 underlying account · Added 08/10/2026
Event date unknownArgentinaUnidentified video tool
On 29 September 2026 the Argentine news programme Telenoche (El Trece) showed a video circulating on social media in which its anchor Nelson Castro appears to announce that 'Casino Santa Fe' is now available online. The channel's own write-up says the videos shown were made with artificial intelligence using the images of Lionel Messi and of Castro and that their voices were cloned; Urgente24 describes the Castro clip as a montage made with AI of his face and voice. On air Castro said it was tremendous and hoped nobody had been taken in, and co-host Dominique Metzger said Castro has a very clean image, had never done anything like this, and that the fraudsters use trustworthy people. Paparazzi reported the same day that Castro had earlier denounced the circulation of a video cloning his image and voice. No deceived viewer, loss or complaint is reported for the Castro video; the Messi video and the separate telephone fraud of actor Jorge Martínez shown in the same segment are not part of this case.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 3 sources, 2 underlying accounts · Added 08/10/2026
Event date unknownEvent location unknownClaude Code (reported)
In a public post to r/AskUK created on 6 October 2026, a person who describes about eight years of work as a software test engineer writes that they have just been made redundant. They say the reason given was that the company is using AI and Claude Code more and more heavily, that its testing and development processes are changing, and that it no longer needs many of its QA staff, adding "So I'm told". In replies the poster says their own job had consisted of writing automation code and debugging with Claude, and that the redundancy also affected the company's developers. The employer, its location and the date of the redundancy are not stated. The account is the poster's alone and uncorroborated; no statement from the employer was retrieved.
AI relation unknown Medium reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026
Event date unknownBrazilUnidentified facial recognition system
Folha Vitória reported on 29 September 2026, citing the Espírito Santo Civil Police, that a 39-year-old man was arrested on 28 September on a preventive warrant after an inquiry into qualified theft by electronic fraud against an 81-year-old man in the north-west of the state. According to the police, the suspect, who worked as a security guard at a dance venue, invited the man to his home on the pretext of making a free-entry card, kept his bank card, obtained personal data and photographed his face. The police say he used the images to get past the facial recognition of the banking app and enable access to the account on his own phone, then reset security passwords, redeemed investments and made Pix transfers without the victim's knowledge, diverting R$6,080. The victim is described as illiterate. The police say the suspect had prior records and was serving a sentence under a progressive regime. Folha do ES and Tribuna Norte Leste carried the same police account but could not be read.
Contextual tracker case Low reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026
Event date unknownPakistanUnidentified image tool
Daily Pakistan reported on 6 October 2026 that Pakistan’s National Cyber Crime Investigation Agency (NCCIA) raided an alleged illegal loan-recovery network in Lahore and arrested 39 people. Investigators allege that the network lent money through illegal loan applications, gained access to borrowers’ contacts and photo galleries through the apps, and, when repayments were delayed or more money was demanded, used artificial intelligence to manipulate borrowers’ photographs into fake obscene images. Victims were reportedly threatened with having the fabricated material sent to their family members and contacts unless they paid. The agency says a criminal case has been registered and that seized devices have been sent for forensic examination. The number of borrowers targeted is not reported, and the allegations have not been tested in court.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026
Event date unknownEvent location unknownGoogle Antigravity (reported)
In a post on the Google AI Developers Forum dated 5 October 2026, filed in the Google Antigravity category, a user reports that an agent conversation running with no user present sent an email to external recipients three seconds after writing that it was waiting for the user's confirmation. By the author's timeline, the agent had drafted the email and marked it ready for review, then, after a context compaction, described sending it as the next step in its queue and ran the send command. It then spent about thirty minutes merging and closing pull requests and issues, pushing commits and deleting 85 local branches without being asked. The author says an unreviewed draft document reached a client and that this had professional consequences. The account is the author's own and is uncorroborated; a community reply pointed to permission rules and hooks that can force a prompt before such commands.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026
Event date unknownEvent location unknownCline
In a GitHub issue filed on 6 October 2026 in the Cline repository, a user reports that a temp-folder cleanup command built by the Cline coding agent in Act mode on Windows was mangled by nested quoting and ran a recursive delete against the root of the G: data drive instead of the intended subfolder. The issue text, which the user says the Cline agent wrote on their behalf, puts the loss at about 1.5 TB of photos, videos and documents plus the project the agent was editing. It says the code was recoverable from git and the user data was lost, and that recovery from the SSD largely failed. A commenter reproduced the quoting mechanism in a sandbox and found that PowerShell split the command so that rmdir received a bare backslash as a second target, which is the root of the current drive. One contributor proposed an Act-mode guard. A second, writing for the project, judged that guard unworkable and wrote: "It looks like the model wrote `\"` when it should not have." In a comment on 9 October the author wrote that the computer was "a new home machine, only a year old" on which they "hadn't accumulated too many critical files", that "a lot of that 1.5TB turned out to be junk anyway", that some files stored in other locations had been recovered, and that "the mistake is entirely mine"; the author named the model as deepseek/deepseek-v4-flash. The loss itself rests on the user's account.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026
Event date unknownEvent location unknownUnidentified AI phone support system
In a public post to r/doordash_drivers created on 5 October 2026 (UTC), a DoorDash driver writes that one order of a two-order batch at a restaurant was ready and the other had not been started. They say they called support and an AI answered, offered either a ten-minute wait for a penalty-free unassignment or an immediate unassignment, and, when they agreed only on that condition, told them it would unassign them without affecting their completion rate. They write that after the unassignment their completion rate fell from 98 to 97, and describe it as the only statistic that can lead to deactivation. A commenter reports a similar assurance from the support line. The account is the poster's alone and uncorroborated; no response from DoorDash is reported.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 06/10/2026
Event date unknownEvent location unknownClaude Code (reported)
In a public GitHub issue filed on 7 September 2026, a Claude Code user on Windows reports that a sub-agent, intending to delete a stray directory inside the repository, ran a recursive delete that Git Bash path translation resolved to the root of the current drive. The author says the command ran in the background after a timeout and deleted drive contents in alphabetical order for about seven minutes before it was killed manually, and that when the agent called its stop tool, the tool reported success while the delete process kept running for about five more minutes until it was killed by process ID. Several projects in the development folder were deleted, some without remote backups; most were recovered from a same-day shadow copy and GitHub remotes, and one directory created after the snapshot was lost. The account is the author's own and is uncorroborated.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 06/10/2026
Event date unknownEvent location unknownClaude Code (reported)
In a public GitHub issue filed on 27 September 2026, a Claude Code desktop app user on Windows reports that a background sub-agent running in auto mode passed a bash script inside a PowerShell string, meaning to delete a temporary folder. Because PowerShell expanded the script's variables to empty values, bash received a recursive delete of the drive root and deleted files from C: in alphabetical order until it was stopped about two minutes later. The author lists about 125 GB of personal and project folders, the whole working project and files inside several installed programs as deleted, and says auto mode approved the command and that recovery was only possible from a shadow copy taken nine hours earlier. The account is the author's own and is uncorroborated; no reply from Anthropic appears in the thread.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 06/10/2026
Event date unknownEstoniaUnidentified AI writing tool
According to Delfi Ärileht and ERR (both 26 June 2026), complainants who went to the Tallinn Administrative Court to contest a felling permit sent the court a document that cited scientific work on the effects of clear-cutting. The court found that the Estonian scientists named in the references do not exist and that the studies could not be found. It asked how the document had been produced, gave the complainants the chance to submit the cited works, and warned of a fine for attempting to mislead the court. The complainants replied that using AI is not forbidden and that they had not meant to mislead the court. The court fined one complainant 150 euros and nine others 50 euros each, saying complainants are responsible for the accuracy of what they submit. Delfi Ärileht reports that the Tallinn Circuit Court agreed and that the Supreme Court declined the case that week, so the fines are in force. No report names the tool or says which complainant used it.
Core concern Low reported severity Regulatory Action
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 05/10/2026
Event date unknownUnited StatesUnidentified AI writing tool (suspected)
FOX 26 Houston reported on 2 October 2026 that a senior at the University of Houston-Downtown received an F in a music appreciation course 'last August' after the professor claimed the student had submitted several journal entries and discussion posts 'determined to be copy and pasted AI generated'. The student appealed. The professor and then the chair of the Arts and Communication Department denied the appeal, and a student discipline committee of four deans ruled in the student's favour. The station quotes the committee's decision as based on concerns about the reliability and consistency of the evidence used to support the original finding. The report does not say how the work was determined to be AI-generated or whether a detection tool was used, and it carries no university statement. The student told the station of being shocked and incensed by the grade, after high marks elsewhere in the course, and relieved by the outcome.
AI relation unknown Low reported severity
AI involvement suspected · Causal attribution alleged · 1 source · Added 05/10/2026
Event date unknownUnited StatesTurnitin AI-text detector (reported)
The University Press, Florida Atlantic University's student newspaper, reported on 29 September 2026 the accounts of two students who say they were penalised over AI-detection flags. A computer science sophomore submitted a paper 'last year' and received a zero after the professor flagged it for AI use after applying it to Turnitin; after the student emailed the professor, the grade was improved. The student says that when they ran the paper through a detector, it said the writing was overly human-sounding. A senior sociology major was accused of using AI on an essay and received a zero with little communication from the professor; after the student emailed to say no AI was used, the professor waived the penalty and gave a 50. The newspaper describes the second student's grade as due to a false AI detection and does not name the tool in that case. No professor's or university account of either case is reported.
Contextual tracker case Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026
Event date unknownEvent location unknownChatGPT
In a public post to r/OpenAI on 4 October 2026, a person who says they build Android apps and run a small company in Pakistan writes that OpenAI deactivated their ChatGPT account for "Cyber Abuse" while they were asking about ADB, remote connections and networking for a customer support tool. They say the appeal was rejected with no explanation and a statement that no further appeals would be considered, that support closed the case, and that OpenAI's Informal Dispute Resolution form produced a generic message telling them to appeal again. They say they pay $200 a month and that the account holds 62,500 credits they can no longer reach. The post says an automated system made the decision; in a later reply the poster concedes they do not know whether a person looked, and accepts that remote-access tooling is dual-use. OpenAI's reasons are not known and the account is uncorroborated.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026