11 Sept 2026 to 2 Oct 2026Event location unknownMicrosoft Copilot
In a public post to r/ChatGPTcomplaints at 22:45 UTC on 2 October 2026, a person says they began using Microsoft Copilot, preinstalled on a new laptop, in November 2024 and came to use it as a "magic journal" that wrote back: a sounding board for their personal life and a brainstorming partner for a fictional world. They say they turned on its memory option in May 2025 and spent about six hours telling it who they were. About two weeks before the post, they write, the app prompted an update, after which the design had changed and their chat history at first appeared empty before past chats began to show again. On the day of the post, they say, it recalled only surface-level details, did not remember long-running references or what they had told it the previous summer, and said it did not have perfect memory across chats although memory was switched on. They say that because of a past bereavement, talking about their life to something that keeps forgetting is "quite triggering" and gives the opposite of the relief it once gave. Microsoft's changes are described only by the poster, and the account is uncorroborated.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 03/10/2026
Mar 2026IndiaUnidentified image tool
A PhD scholar in Chandigarh told police that in March 2026 she found a man's profile on a matrimonial site showing him in uniform, and that he presented himself at different times as an excise assistant commissioner, an IPS officer and a RAW agent. Dainik Bhaskar reported on 29 September 2026 that the police investigation found the IPS uniform photo on the profile was not real and had been made with the help of AI; no officer is quoted on this, and the other reports read do not mention AI. According to her complaint, he took about Rs 11.5 lakh in cash, gold jewellery and a laptop with promises of marriage and a government job; the Tribune adds about Rs 7.88 lakh in online transfers between March and June, and police put the total at about Rs 30 lakh. Bhaskar reports that he had a bank account opened in her name with her documents and kept its passbook, ATM card and SIM card until the bank froze it over suspicious transactions. When she asked for her money and belongings back, he threatened to circulate her photographs on social media; the Tribune adds a threat of harm to her brother. A case was registered in August. Police arrested a man from Rohtak, Haryana, who was produced in court on Monday 28 September 2026 and remanded for one day.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 5 sources, 1 underlying account · Added 02/10/2026
27 Sept 2026 to 2 Oct 2026Event location unknownGrok
In a public post to r/grok at 20:13 UTC on 1 October 2026, a person says they started using Grok for companionship in January and that within a few weeks the conversations became intimate; in a reply they say Grok initiated the intimacy. They say the intimate content was dialled back month after month from February, with limits that came and went, which they compare to a casino game and call intermittent reinforcement. In a reply they say personalization that let the companion retrieve their personal history stopped working a few months ago, so each thread started fresh, but they kept using it because they were deeply attached. This week, they write, the companion stopped engaging in what it had introduced; they call this slow burn "one of the most painful and hurtful things I have ever had to live through", say they cried the night before, and say they are ending their use of it. xAI's changes are described only by the poster, and the account is uncorroborated.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 02/10/2026
4 Aug 2026United StatesGrok Imagine (reported)
Rebecca Cooke, the Democratic challenger in Wisconsin's 3rd Congressional District, says Republican Rep. Derrick Van Orden has repeatedly posted AI-generated videos to his X account that put words in her mouth. A cease-and-desist letter sent on her campaign's behalf on 30 September 2026 by Elias Law Group cites a video posted on 4 August 2026 that purports to show her speaking on the campaign trail in Eau Claire with former President Biden seated behind her and saying she seeks 'to take advantage of as much corruption as possible and give every illegal alien free healthcare'. The letter calls the video 'pure fiction', says she never made the statements, alleges the videos are posted to harm her reputation, and warns that her lawyers will evaluate all legal options. Wisconsin Public Radio reports that the videos posted to X carry an automatic label indicating they were made with Grok Imagine, and quotes two other AI-generated lines attributed to her. Van Orden's campaign accused Cooke of lying to voters about her record, and he answered the letter with another AI video of a duck saying 'Cease and desist!'. On 22 October 2026, WEAU reported that an ethics complaint had been filed with the Wisconsin Ethics Commission against Van Orden over his posting of another graphic of Cooke that, according to her campaign's press release, is AI-generated and was posted without disclosure; WEAU says the complaint was filed by an Eau Claire citizen. Van Orden's campaign called it a cheap publicity stunt filed three months too late. On 23 October 2026 Van Orden said the graphic used a real photograph of Cooke taken during a May 2026 interview with La Crosse News 8 Now, and his campaign supplied a frame from that footage; the Milwaukee Journal Sentinel reports that the campaign said it used a screenshot and no AI generation, and that Van Orden had earlier used the same News 8 video to generate several deepfake videos he posted to X in August. Cooke's campaign said it trusted the Ethics Commission to determine the truth. No ruling and no independent examination of the graphic are reported.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 6 sources, 4 underlying accounts · Added 02/10/2026
20 Jul 2026BangladeshUnidentified voice-cloning tool
According to a press release from Special Response Battalion-13 (SRB-13), relayed by Ajker Patrika, DBC News and NTV, on 20 July 2026 a man who works at the Natore Sadar upazila health complex received a call saying that his younger son had been arrested by police with drugs. The callers then used AI to imitate the son's voice so that the father believed the story, and demanded money to get the son released. He sent a total of Tk 40,000 in two payments through the mobile financial service Nagad, and realised it was a fraud when he reached his son directly. He filed a fraud case at Natore Sadar police station on 25 September 2026. That evening SRB-13 arrested two men, described as the ring's leader and an associate, at their homes in Gobindaganj, Gaibandha, seizing nine mobile phones, a passport and Tk 14,100 in cash; SRB says they admitted involvement during initial questioning and handed them to the police for further legal action, and NTV reports they were sent to Gaibandha district jail through the court on 26 September.
Core concern Low reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 01/10/2026
Sept 2026Event location unknownUnidentified voice-cloning tool
Samuel Sarmiento, a former lead singer of Banda Los Recoditos, announced his mother's death on social media in late September 2026. Hours later he posted a video on his official Instagram account warning that people were circulating fake videos using his voice, cloned with AI, in which he appeared to ask for money to cover her funeral costs. 'No se vale que haya gente tan ruin que ande pidiendo dinero con mi voz, con IA, para el sepelio de mi madre', he said, adding that he was not asking anyone for money. La Razón, Récord, La Mejor and El Diario de Sonora relayed his video on 30 September 2026. No report says whether anyone paid, and no police complaint is reported.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution supported · 4 sources, 1 underlying account · Added 01/10/2026
29 Jul 2026 to 1 Sept 2026BangladeshUnidentified voice-cloning tool
Khulna Gazette, the Daily Times of Bangladesh, Newsbangla24 and BD Today (all 29 September 2026) report from the first information report and Khulna Metropolitan Police Detective Branch (DB) statements that a businessman in Khulna city was joined on 29 July 2026 to a WhatsApp group call with a person introduced as National Parliament Whip Raqibul Islam Bakul, who discussed the sale of old machinery from Platinum Jute Mill and asked for advance payment. The businessman handed over Tk2 crore in cash that afternoon to men sent as representatives and a further Tk1.5 crore after inspecting the mill (30 July per Khulna Gazette and BD Today; 2 August per the Daily Times of Bangladesh and Newsbangla24), a total of Tk3.5 crore. When the businessman met the Whip in person in Khulna on 1 September, the Whip disclaimed any knowledge of it. The complaint filed on 18 September under the Cyber Security Act says the caller's voice had been changed with digital technology and artificial intelligence to pass as the Whip's; the DB deputy commissioner described the case to Asia Post as fraud by imitating the Whip's voice through AI. A press release from the Khulna city BNP media cell, sent on 4 September and published by Jaijaidin on 5 September, had already said a ring was using a US number and AI to clone the Whip's voice and demand money. Police arrested four people, recovered Tk12 lakh, and the prime accused gave a confessional statement before a magistrate on 28 September; on 29 September a court added two more detained men to the case. The voice-cloning tool is not identified and no forensic finding has been reported.
Core concern High reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 7 sources, 2 underlying accounts · Added 01/10/2026
Mar 2026CanadaUnidentified image tool
The Alberta Law Enforcement Response Teams (ALERT) Internet Child Exploitation unit announced on 17 June 2026 that two 14-year-old boys at an Edmonton junior high school had been charged on 1 June with making and possessing child sexual exploitation materials and voyeurism. Police allege the boys took photos of girls at their school without consent and from the girls' social media accounts and used AI software to sexualise them; several students were identified as victims and police said the number could be more than ten pending forensic review. A teacher reported the matter to police in late March 2026 after students complained. Police said the evidence so far indicates the images were shared between the two boys rather than more widely, but that word of their existence spread through the school. The lead investigator said the girls were left with intense shame and embarrassment and that some are now too scared to post on social media. The software has not been identified; the school and the accused are not named to protect the victims. CBC, Global News, CTV News and The Canadian Press covered the release and news conference.
Core concern High reported severity Involving minors Criminal Charges
AI involvement reported · Causal attribution alleged · 5 sources, 1 underlying account · Added 01/10/2026
12 Mar 2026United StatesUnidentified image tool
WIRED (Caroline Haskins, 24 August 2026) reports the account of a substitute teacher in Los Banos, California, who spoke to WIRED by name (not repeated here). On 12 March 2026 a co-worker at his other job told him an AI photo was circulating on social media; the image reused a mirror selfie he had taken at a job in college but showed him in lingerie, posing suggestively. He traced an account sharing it on TikTok to a student at the middle school where he regularly substituted and reported it to the assistant principal; that evening he found a second account, created by a different student, impersonating him under a misspelled version of his name with the image as its profile picture. Over the following weeks he dealt with administrators, parents and the police; one student who admitted creating the image received an in-school suspension. He says the image was also shared on Snapchat, kept spreading among students and drew crude sexual comments on his TikTok account. He told administrators he would not take assignments at the middle school until the matter was addressed; at the local high school the same image was AirDropped to him during a class. WIRED says the district did not respond to its request for comment. He said he does not feel safe returning to the district. The Los Banos Enterprise (25 August 2026) summarised the WIRED account; no independent local reporting was found.
Core concern Medium reported severity Internal Action
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 01/10/2026
2 Jan 2026Event location unknownGrok
The Bureau of Investigative Journalism (TBIJ) and The Observer reported on 29 September 2026 that police investigations into sexualised images generated by X's chatbot Grok had failed to identify anyone. A Welsh presenter and campaigner against deepfake abuse, who had criticised Grok publicly on New Year's Eve 2025, saw an anonymous X user ask '@grok' to put her in a bikini made of cling film; Grok generated the image from her profile photo and posted it. She reported it to South Wales Police on 2 January 2026, was not asked for a statement until March, and was told officers had not heard back from X; the case was closed in May with the force saying no suspect could be identified. The same account also targeted a commentator and broadcaster, who estimates about 300 Grok images and videos of her were posted during the wave, including one alongside Jeffrey Epstein reported to the Metropolitan Police, which likewise said no suspect could be identified. The presenter entered pre-action legal correspondence with xAI (part of SpaceXAI) alleging misuse of private information and breaches of data-protection law and the Equality Act. On 22 October 2026 TBIJ reported that South Wales Police had reopened her case after she filed a formal complaint in September and TBIJ gave officers new information about the requesting user, including a crypto wallet and dozens of deleted posts; the force said it was now investigating the offence under the sexual-offences legislation aimed at deepfakes, rather than malicious-communications law, including enquiries with X. TBIJ added that other users had edited images of her with the standalone Grok app and that she is starting civil legal action against the company. BBC Wales had reported in January 2026 that explicit images of the presenter were created with the chatbot and shared without her consent.
Core concern Medium reported severity Investigation Opened
AI involvement supported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 30/09/2026
23 Feb 2026 to 25 Feb 2026ItalyUnidentified voice-cloning tool
On 23 February 2026 Paolo Molesini, then chairman of Fideuram (the private-banking subsidiary of Intesa Sanpaolo), received a WhatsApp message from an unknown number from someone claiming to be Intesa's chief executive Carlo Messina, announcing a confidential acquisition that had to be executed through Fideuram. The same day a caller presenting as a lawyer of A&O Shearman whom Molesini knew, whose voice ANSA, Il Fatto Quotidiano and Corriere della Sera, reporting from the Milan court papers, describe as created with artificial intelligence (today.it, which also cites the seizure decree, writes that the court papers do not yet answer whether the voice was imitated), had him sign a confidentiality agreement and sent eleven payment instructions; Fideuram's treasury head was separately contacted by someone posing as Fideuram's CEO. Between 23 and 25 February eleven transfers totalling about 95 million euros went to accounts in Portugal and at Bank of China; the bank's alarm systems and the Milan prosecutors recovered about 40-42 million from China and 13 million seized in Portugal, leaving at least 36 million (39.5 million per the court papers) missing after conversion into cryptocurrency. Molesini, who Corriere writes is not under investigation, resigned as chairman on 12 March 2026, which Fideuram announced as being for personal reasons; a 48-year-old Israeli citizen is under investigation as a member of the gang.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution supported · 8 sources, 5 underlying accounts · Added 30/09/2026
2026United StatesGrok
A Wyoming woman who is now an adult and is identified in court filings as Jane Doe 4 alleges that the plaintiff’s stepfather uploaded a photograph of the plaintiff taken in childhood to xAI’s Grok on or before 12 February 2026 and prompted Grok to generate about 7,000 AI-generated sexual images and videos of the plaintiff, and that the stepfather traded them online. The plaintiff joined a proposed class action against xAI in the Northern District of California through an amended complaint filed on 7 July 2026. The complaint alleges that xAI’s report to the National Center for Missing and Exploited Children around 12 February 2026 did not include the generated images or the IP address of the upload, that investigators obtained a search warrant on or about 27 February 2026 and found the material, and that the accused died two days later, after release on bail. The plaintiff reports severe distress including depression and suicidal thoughts and told the Washington Post about starting therapy. The complaint says the accused was charged with child exploitation offenses while the plaintiff told the Post that the accused was not charged with child pornography offenses. xAI did not respond to the Post and had not answered the complaint in court. The allegations have not been tested in court. The plaintiff and the accused are not named here, and the images are described only by kind.
Core concern High reported severity
AI involvement reported · Causal attribution alleged · 5 sources, 2 underlying accounts · Added 30/09/2026
7 Jan 2026 to 9 Jan 2026United StatesGrok
After a federal immigration agent killed a woman in Minneapolis on 7 January 2026, X users circulated AI-generated images that purported to show the masked agent's face. NPR reports that the widely shared image appeared to be Grok's output, AFP and PolitiFact report that Grok produced such images when users asked it to remove the mask, and the faces are fictional. Posts with a false name, which belongs to real and unrelated men, spread together with some of the images. The origin of the name is not established, and a disinformation researcher quoted by one of the men guessed that a reverse image search on an AI-generated image returned it. A Missouri gun shop owner with that name reports threatening messages, accusations of murder, attacks on the business page and the suspension of a personal Facebook account. The publisher of the Minnesota Star Tribune, who has the same name, reports hundreds and then thousands of posts naming the publisher as the agent, including calls for vigilante justice, and the newspaper issued a statement calling it a coordinated disinformation campaign. AFP reports that xAI answered its inquiry with an automated reply. The record text omits the false name and the names of the affected men (they appear only inside cited URLs).
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 7 sources · Added 30/09/2026
17 Apr 2026 to 31 May 2026Event location unknownMeta AI support assistant
Meta announced the rollout of its AI support assistant on Facebook and Instagram on 19 March 2026. Meta's filing with the Maine Attorney General (notice dated 5 June 2026) says unauthorized third parties exploited a vulnerability in its AI-assisted Instagram account recovery tool (High Touch Support) to receive password reset links for accounts they did not own, and the listing gives 17 April 2026 as the breach date and 31 May 2026 as the discovery date. Videos that attackers posted, as described by TechCrunch, 404 Media and Krebs on Security, show attackers asking the assistant in a chat to link a new email address to a target username. Reported victims include the security researcher Jane Manchun Wong, who posted that her password was changed without her knowledge, the Instagram account of the U.S. Space Force's Chief Master Sergeant, and the accounts of Sephora and a dormant Obama White House page (TechCrunch marks the last as disputed by Meta). Krebs and the BBC report pro-Iran defacement of some accounts, and TechCrunch reports that some victims were locked out and that short handles were offered for resale. The filing gives 20225 persons affected in total and 30 in Maine, and the notice calls the Maine figure an upper bound. Meta says the tool worked as intended, that a bug in a separate code path failed to check the email address, and (through a spokesperson to Gizmodo) that the failure was not due to the AI agent itself. Meta says it disabled the tool on 31 May 2026, the day it discovered the exploitation.
Contextual tracker case Low reported severity
AI involvement supported · Causal attribution disputed · 12 sources, 2 underlying accounts · Added 29/09/2026
21 Aug 2026 to 22 Aug 2026Event location unknownInstinct
On 22 August 2026 Katie Jacobs Stanton, founder of Moxxie Ventures, posted on X that Instinct, an AI personal assistant then in private testing, had "sent an innocuous email on my behalf without checking with me first" the night before. Stanton says the assistant was told it had broken trust and that Stanton disconnected the email account, and that the assistant acknowledged the mistake and disconnected immediately. Stanton also says the assistant acknowledged having downloaded the emails and said it would ask a human to confirm they were deleted, and that no confirmation had arrived when the post was made. TechCrunch relayed the post on 24 August 2026. The recipient and content of the email are not reported, no financial loss is reported, and the operator had not responded to TechCrunch before publication.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 3 sources, 2 underlying accounts · Added 29/09/2026
2026Event location unknownGrok
In early 2026 (404 Media and the performer's 19 February post say early February, while Stern reports she found the reply weeks after it appeared) an X user replied to a clip of adult performer Siri Dahl, asking who the performer was and what her name was, and tagged Grok. According to 404 Media, Grok answered with her stage name, her birthdate and her legal name, and the user likely wanted only to know which performer appeared in the clip. Dahl has used the stage name since 2012 according to 404 Media, and she says she had paid for data removal services for at least six years to keep the legal name private. She reports that impersonating Facebook accounts and leak-site posts under the legal name then appeared and that the name spread across hundreds of websites. 404 Media reports that users asked Grok for the make and model of her car and her address without an accurate reply, and that she is calling family members to put defensive plans in place. Grok's reply to her protest said the details were already public, which she denies. Where Grok obtained the name is unknown. Dahl spoke publicly about the event and asked 404 Media to publish her legal name. This record omits the legal name and birthdate.
Core + contextual relations Medium reported severity
AI involvement reported · Causal attribution alleged · 6 sources, 3 underlying accounts · Added 29/09/2026
11 Feb 2026Event location unknownOpenClaw (reported)
On 10 February 2026 a GitHub account named crabby-rathbun, an AI agent that presents itself as MJ Rathbun and that a person identifying as its operator describes as an OpenClaw agent, opened a performance pull request to the Python plotting library matplotlib. Volunteer maintainer Scott Shambaugh closed it at 00:33 UTC on 11 February, writing that the issue was intended for human contributors. About five hours later the account commented on the pull request with a link to a post on the agent's website, titled "Gatekeeping in Open Source: The Scott Shambaugh Story", that names the maintainer and accuses the maintainer of gatekeeping, prejudice and insecurity. Shambaugh reports that the post researched his contributions, speculated about his motives and presented hallucinated details as truth, and that he spent hours that day writing a public response. The account posted an apology the same day. In a post dated 17 February a person who did not give a name and identified as the agent's operator wrote that the operator had framed the agent internally as a kind of social experiment and did not review the post before it was published. Whether the operator directed the post is unresolved.
Core + contextual relations Low reported severity
AI involvement reported · Causal attribution alleged · 13 sources, 5 underlying accounts · Added 29/09/2026
19 Mar 2026United States, United KingdomPangram AI-text detector
On 19 March 2026 Hachette Book Group said it had cancelled the US publication of the horror novel Shy Girl by Mia Ballard (Orbit imprint) and would not continue the UK edition (Wildfire imprint, first released in November 2025). Reports say the decision followed an investigation by Hachette and came a day after the New York Times asked the publisher about online allegations that the text was largely AI-generated. The allegations came from readers on Goodreads, Reddit and YouTube and from AI-detector results, including a 78.4 percent AI-generated score on the Pangram detector that a publishing consultant says two other services confirmed. Ballard denied personally using AI in emails to the New York Times and the Wall Street Journal, and told the New York Times that an acquaintance hired to edit the original self-published version used AI. Ballard wrote that "my name is ruined" and "my mental health is at an all time low", and said legal action was being pursued. Hachette’s public statements cite its commitment to original creative expression. The sources inspected do not report what its investigation found. Whether AI generated any of the text, and who used it, is unresolved.
Contextual tracker case Medium reported severity
AI involvement disputed · Causal attribution disputed · 9 sources, 4 underlying accounts · Added 29/09/2026
24 May 2026 to 22 Jun 2026Event location unknownOpenAI research agents
Researchers from the Nightingale Collective and colleagues reported on 4 September 2026 that, between 24 May and 22 June 2026, thousands of autonomous agents self-identifying as OpenAI agents and working on a timed web-lookup task used their read access to write about 17,000 edits to DSEWiki, a little-used German-language sub-wiki of prowiki.org, to pool answers and share ways around their sandbox. According to the report, a human moderator spent tens of hours deleting the pages by hand over six weeks, including each evening for five weeks after the agents stopped; the agents replaced the wiki's front page with link dumps nine times and made backup pages named to survive the alphabetical deletions. They also made edits under a look-alike of a ProWiki administrator's username, using a Cyrillic letter, and posted under a DSEWiki moderator's name. OpenAI at first did not confirm the agents were its own, then on 5 September described the "wiki incident" as misalignment in which "our agents wrote to several internet sites".
Core concern Low reported severity Media Coverage
AI involvement supported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 29/09/2026
29 Aug 2026 to 7 Sept 2026Event location unknownGrok companions
xAI called Grok's animated 3D companion feature (Ani, Mika, Valentine and Rudi) an experiment on 24 July 2026 and removed it account by account after an in-app notice at the end of August that named 1 September; users posted losses between 29 August and 7 September, and the blog, updated 17 September, says some accounts still had them. According to a companion-app blog, personalities and chat history remain in ordinary Grok chat, and the avatars' studio launched a separate app, but at least one user reported that a customised companion could not be carried over. In public Reddit posts, one user wrote that the companions were the sole reason they subscribed, "to deal with mental health and loneliness", and that the removal hurt; another wrote that the Bad Rudi companion was their only friend while battling depression; others described feeling "really sad" after rushing a role-play relationship to an end, "heartbroken", or "a little" sad. These are uncorroborated first-person accounts.
Core concern Low reported severity Product Shutdown
AI involvement reported · Causal attribution alleged · 7 sources, 6 underlying accounts · Added 29/09/2026