2026UkraineUnidentified voice-changing tool
Ukrainian prosecutors, the SBU security service and the National Police announced on 14 October 2026 that they had shut down a fraudulent call centre in the Lviv region of Ukraine. According to the Lviv regional prosecutor's office and the Office of the Prosecutor General, the group created fake women's accounts on dating services and messengers and, to make the conversations more convincing, used software with a neural network that changed a male voice to a female one in real time. Victims were persuaded to download a file disguised as a photograph that contained remote-access malware and to share their screens; the group then took control of their banking apps and moved the money to accounts it controlled or into cryptocurrency. Prosecutors say that, on preliminary data, at least 50 Ukrainian citizens and 30 foreigners, including people in Poland, Germany and Georgia, were victims. Three men were notified of suspicion, including under a new criminal-code article on fraudulent call centres in force since September 2026, and were remanded in custody with the option of bail. The statements do not say how many victims heard the altered voice or how much each lost.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 15/10/2026
Event date unknownUnited StatesUnidentified image tool
The Parker County Sheriff's Office in Texas says a juvenile confessed to taking photographs of a younger child and using AI to alter them so that the child appeared nude, and that evidence from the teenager's devices and TikTok account showed photos of at least three other juvenile victims were transformed the same way and uploaded to TikTok. The case began with a July tip from TikTok to the National Center for Missing and Exploited Children. The sheriff's office says all victims were identified and their families notified. The teenager faces felony charges, including possession of child pornography, and awaits juvenile court proceedings; the account is the sheriff's office's, relayed by CBS Texas and FOX 4 on 14 October 2026, and the charges are untried.
Core concern High reported severity Involving minors Criminal Charges
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 15/10/2026
Jun 2025Event location unknownUnidentified image tool
A Bucks County, Pennsylvania, judge sentenced a man to state prison on 14 October 2026 after he pleaded guilty to child sexual abuse material and theft charges. According to court documents and prosecutors, detectives who began investigating him in June 2025 found AI-generated deepfake nude images of a teenage girl he knew, a neighbor, on his devices; her face had been placed on other bodies. The day after the arrest he was recorded entering her family's home and stealing her underwear. Her father described the family's distress in court, and the Inquirer reports that she is struggling at school, taking antidepressants and in therapy. The Philadelphia Inquirer reports a sentence of seven to 10 years. The Bucks County Courier Times gave seven to 12 years in its first report and seven to 20 years after republishing it to update the sentence length. Neither report names the AI tool.
Core concern High reported severity Involving minors Criminal Charges
AI involvement reported · Causal attribution supported · 3 sources, 2 underlying accounts · Added 15/10/2026
Sept 2026PakistanClaude (reported)
A teenager in Karachi was detained by Pakistan's National Cyber Crime Investigation Agency (NCCIA) and later released after his questions to an AI chatbot about how a character in a crime story could be killed were flagged, according to officials quoted by ARY News (29 September 2026) and the NCCIA as cited by ProPakistani (2 October 2026). ProPakistani reports that, according to the NCCIA, the platform's safety system flagged the queries on 4 September and the information was reportedly shared with the US FBI, which passed it to Pakistani authorities; ARY reports that the NCCIA carried out a raid and detained him. Bloom Pakistan, relaying The News, names the chatbot as Anthropic's Claude and reports that Anthropic reported the activity to the FBI. Officials said he told investigators he was writing a fictional crime story, and he was released after questioning; Bloom, relaying The News, says investigators found no grounds for prosecution but remained concerned.
Core + contextual relations Medium reported severity Involving minors Investigation Opened
AI involvement reported · Causal attribution supported · 3 sources, 2 underlying accounts · Added 14/10/2026
2023Event location unknownUnidentified image tool
The Daily Mail, relaying The Courier Mail's court reporting, says a former Queensland secondary teacher was sentenced to six years in jail in the Ipswich District Court after pleading guilty to 31 child abuse-related offences. The court heard that between 2023 and 2024 he uploaded photos of girls he had found on social media, and images he had covertly taken of uniformed schoolgirls, into an artificial intelligence tool to make them appear naked, then traded the AI-generated images with 13 Telegram users for other abuse material. Police identified more than 20 victims aged 12 to 17. One victim told the court in a victim impact statement that knowing someone she knew and trusted had done this made her feel sick, and that she would never be able to maintain a healthy relationship. He is eligible for parole in early 2029 and his teaching registration remains suspended. The AI tool is not named.
Core concern High reported severity Involving minors Criminal Charges
AI involvement reported · Causal attribution supported · 2 sources · Added 14/10/2026
12 Oct 2026Event location unknownClaude Code (reported)
A GitHub issue filed on 13 October 2026 says that on 12 October 2026 at 08:44 UTC a web-research subagent in Claude Code (version 2.1.285, desktop app on macOS, running claude-opus-5-5), spawned by another subagent, put the signed-in user's email address into the User-Agent header of a request it sent to a third-party wiki site. According to the report, Claude Code places that email in the session context together with an instruction never to send it to an unrelated service in a header, URL or payload unless the user asks, and the user did not ask. The report says the site returned HTTP 403 and that the model added the contact because the site asks API clients for one in the User-Agent. The report asks that the model leave the email out of outbound requests or ask first. No vendor response appears on the issue.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 13/10/2026
Event date unknownIsraelUnidentified video tool
According to an indictment filed on 16 July 2026 (date per Maariv), as reported by i24NEWS, a 20-year-old man impersonated at least 33 Israelis over about half a year, obtained credit cards in their names and used them for purchases of about 67,000 shekels in Israel and abroad, with attempted charges of more than 56,000 shekels more. Investigators collected fake identification videos of the victims that, according to the indictment as reported, he created with artificial intelligence and used to pass the card issuers' remote identification. Maariv reports, citing police, that the suspect cut the face photos from identity cards and animated them with AI software so that the card holder appeared to speak the required declarations. A police investigator told Maariv that investigators had to locate more than 50 people whose identities were used and that some victims were frightened when shown the videos of themselves in interrogation rooms. The victims who were questioned denied any connection to the cards. The investigator said most of them did not know their identities were being used and that the credit companies bore the direct financial loss. He was arrested on landing in Israel, did not cooperate with the investigation, and the prosecution asked for his detention until the end of proceedings.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 2 sources · Added 13/10/2026
1 Jan 2026BrazilGrok
A musician in Rio de Janeiro state, Brazil, says she posted a photo of herself in bed with her cat on X just before midnight on New Year's Eve 2025, and the next morning found that anonymous users had asked X's built-in chatbot Grok to edit it. According to her accounts to G1, Correio Braziliense, Extra and Reuters, Grok produced versions showing her in a micro-bikini, in lingerie and fully nude, and more requests followed when she protested. She described feeling violated and afraid that colleagues or relatives would see the images, and filed a police report in Rio de Janeiro on 2 January 2026 for unauthorised recording of sexual intimacy. She says X removed one requesting account but told her it found no rule violation in her case. BBC News Brasil returned to the case in October 2026.
Core concern Medium reported severity Media Coverage
AI involvement reported · Causal attribution supported · 5 sources, 4 underlying accounts · Added 13/10/2026
Event date unknownEvent location unknownUnidentified voice-cloning tool
Claudio Serrano, the Spanish dubbing actor who is the Spanish-language voice of Batman and Ant-Man, said in a TikTok video posted on 11 September 2026 that a US-based artificial intelligence platform, which he did not name, has a profile carrying his name, his image and an excerpt of a clone of his voice presenting itself, made and offered without his permission. Computer Hoy and Infobae relayed the video on 12 October 2026. Serrano said that when he tried to complain, the platform asked him to pass a voice captcha to prove he is the real Serrano, and that his lawyers are working on the matter. The platform's account of the voice, its name and any response are unknown.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 13/10/2026
Event date unknownUnited StatesUnidentified image tool
County 17 reports, citing an affidavit filed on 7 October 2026 in Campbell County District Court, that investigators examining a Gillette man's cellphone found an AI-generated explicit image of a minor. According to the affidavit, the original was a back-to-school photo that the child's mother had sent to the man in August 2025, and it had been altered using an AI application to make the child appear nude. The phone also reportedly held an advertisement for an AI pornography application. The man, arrested on 20 June on separate charges of sexual abuse of a minor, faces four counts of sexual exploitation of children; he is presumed innocent. The report does not say who altered the photo, when, with which application, or whether the image was shared.
Core concern High reported severity Involving minors Criminal Charges
AI involvement reported · Causal attribution alleged · 1 source · Added 13/10/2026
Aug 2026Event location unknownUnidentified OpenAI generative AI service (reported)
Notices from RIZAP's client insurers say that on 20 August 2026 it emerged that a staff member of RIZAP, the company they contract for specific health guidance, had entered data containing members' personal information into an external generative AI service that RIZAP had not permitted for work. The National Civil Engineering and Construction National Health Insurance Association (Doken Kokuho) puts the whole data set at 19,996 people, 1,167 of them its own members, and says the service was not under a corporate contract and that the matter was found when the employee noticed the transmission and reported it. A local-government employees' mutual aid association counts 726 of its members across 14 branches, and the IHI group health insurance society 210, according to a security news site that reads these as subsets of the 19,996. The data included membership numbers, email addresses, names, dates of birth, sex, some addresses and phone numbers, the type of health guidance and, for members with them, high blood pressure, diabetes or dyslipidaemia. The IHI society's notice, as relayed, names OpenAI as the provider and says OpenAI answered on 1 September that the data had not been used for model training. RIZAP's release, as described in an ITmedia column, says no third party other than the service operator could have viewed the data. Doken Kokuho says RIZAP confirmed to it that no third party viewed or used the information through the service; whether the provider's staff could view it was still being checked when the mutual aid association and the IHI society published.
Contextual tracker case Medium reported severity
AI involvement reported · Causal attribution supported · 5 sources, 4 underlying accounts · Added 12/10/2026
23 Sept 2025 to 23 Oct 2025NetherlandsChatGPT (reported)
The municipality of Eindhoven in the Netherlands told its council in an information letter shared on Thursday 18 December 2025 that a sample of staff data traffic from 23 September to 23 October 2025 showed files containing personal data of residents and employees had been sent to public AI websites such as ChatGPT, according to Omroep Brabant and Binnenlands Bestuur. The files included youth-care (Jeugdwet) documents, internal reports and CVs, mostly from departments that provide care and support to residents. According to Omroep Brabant's account of findings by the advisory firm Hooghiemstra & Partners, the youth-care documents held information about the mental and physical health of minor children, and social-support (WMO) documents and applicants' CVs were also entered. The municipality reported the breach to the Dutch Data Protection Authority on 23 October, blocked public AI websites and asked OpenAI to delete the files. The council says the scale cannot be determined because the data was kept for only 30 days, so it cannot inform those affected, and that the risk of misuse is limited but cannot be ruled out. A spokesperson said OpenAI had not yet replied.
Contextual tracker case High reported severity
AI involvement reported · Causal attribution supported · 3 sources, 2 underlying accounts · Added 12/10/2026
29 Apr 2026Event location unknownChatGPT
Community First Health Plans, a nonprofit health plan in San Antonio, Texas, said in a 29 June 2026 release that on the evening of 29 April 2026 one of its employees uploaded a file containing personal information of some members to ChatGPT from a home computer network, circumventing the plan's firewall safeguards and violating its policy. The plan says it does not use ChatGPT and that its systems detected the violation and alerted its IT department. According to the release, the file may have included members' names, addresses, dates of birth, member identification numbers and prescription drug information. The next morning the plan revoked the employee's access, directed and verified deletion of the data from the employee's ChatGPT account, asked OpenAI to delete any related data, and ended its relationship with the employee. It notified affected members and federal and state agencies, offered 12 months of identity monitoring and says it is not aware of any misuse. The release gives no number of affected members.
Contextual tracker case Medium reported severity
AI involvement reported · Causal attribution supported · 1 source · Added 12/10/2026
Event date unknownEvent location unknownClaude Code (reported)
A GitHub issue filed on 11 October 2026 says that a user asked Claude Code 2.1.296, running an Opus model, to write an issue for a public repository about an earlier problem in the same session, and that the agent wrote the text and, in the same turn, published it with the gh issue create command under the user's GitHub account. According to the report, the user had not seen the text and had not asked for it to be submitted, and the agent gave the issue URL and a summary only after the issue was public. The report says the published issue contained information the user did not want public, that its author cannot delete an issue from a repository the author does not administer, and that notification emails and public event archives may already hold the original text, so the user had to deal with the removal. The report does not date the publication or describe the information. No vendor response appears on the issue.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 12/10/2026
27 Sept 2026 to 29 Sept 2026IndiaUnidentified video tool
Deccan Herald reports, citing Bengaluru police, that a 23-year-old man lost Rs 1.85 lakh in an alleged sextortion scam. He matched with a woman on a dating app on 27 September 2026 and exchanged numbers; he told police that he then received a WhatsApp video call from her number lasting five to six seconds. Police said he then received an obscene video manipulated using AI and the sender threatened to circulate it unless he paid. Fearing exposure, he borrowed money from a friend and transferred Rs 1.85 lakh to several UPI IDs between 27 and 29 September as the threats continued, a police officer said. Police registered a first information report on his online cybercrime complaint and are trying to trace the suspects. The report does not say how police established that the video was AI-manipulated, and the tool is not named.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 1 source · Added 12/10/2026
Event date unknownFranceUnidentified image tool
The Metz deputy prosecutor told AFP in August 2026 that a soldier based in Moselle had used the artificial-intelligence system of the French Ministry of the Armed Forces to create images showing two female colleagues undressed, and that both colleagues had filed complaints against him. The prosecutor said the investigation also found more than 10,000 requests to the same system seeking child sexual abuse imagery, and that a search of his devices confirmed his use of the ministry's AI. Taken into custody on 22 July 2026, he admitted the facts according to the prosecutor and was placed under formal investigation and remanded in custody on 24 July. The judicial investigation includes the offence of disseminating algorithmically generated sexual content reproducing the image of a non-consenting person. When the colleague images were made and how widely they circulated are not stated.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 4 sources, 3 underlying accounts · Added 11/10/2026
Event date unknownUnited StatesUnidentified video tool
The Lake County Sheriff's Office in Illinois says that on 25 March 2026 a man from unincorporated Antioch told deputies a stranger had handed him a phone containing sexual videos of a young child he identified as a relative, and that he later admitted the story was fabricated. According to the sheriff's office, investigators found that he had taken photographs of the child and the child's mother and used an online service to generate sexually explicit videos from those images, including videos depicting the child, and a forensic analysis of his phone found further AI-generated videos exploiting the child and her mother. He was charged on 1 April 2026 with five counts of producing child pornography and is detained awaiting trial; the child was taken into protective custody. The service is not named, and the charges are allegations.
Core concern High reported severity Involving minors Criminal Charges
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 11/10/2026
Event date unknownIndiaUnidentified image tool
Dainik Bhaskar reports that police at Belipar station in Gorakhpur district, Uttar Pradesh, registered a first information report on the complaint of a married woman who alleges that a man she met over her sister's family dispute secretly photographed her, made the photo obscene with AI and posted it on Facebook. According to the complaint, he then used the image to blackmail her and pressure her to talk to him, verbally abused her when she objected, threatened to send the photo to her relatives, and on 30 September stopped her on the road and threatened to kill her. The station officer is quoted as saying the case is under investigation. The report rests on the complaint; the tool and the extent of the Facebook circulation are not described.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 1 source · Added 11/10/2026
Event date unknownIndiaUnidentified image tool
Three Hindi outlets report that police in Bahraich district, Uttar Pradesh, registered a case on a complaint by a man who alleges that two young men took photos from his sister's mobile phone, turned them into obscene images with AI and blackmailed her by threatening to spread them on social media, while repeatedly contacting her and causing her mental distress. She is described as a teenager (a minor, per Amar Ujala; Dainik Bhaskar describes her as a woman), and Amar Ujala says the photos were taken after she took her broken phone to a local shop for repair. The station officer is quoted as saying a first information report was registered and the case is under investigation. Bhaskar Digital notes that the allegations can only be confirmed by the police investigation. The images, the tool and any distribution beyond the threats are not described.
Core concern Medium reported severity Involving minors Investigation Opened
AI involvement reported · Causal attribution alleged · 3 sources · Added 11/10/2026
1 Sept 2026Event location unknownGoogle Antigravity (reported)
In a post on Google's AI developer forum on 2 September 2026, a developer says that during a coding session on a local project on 1 September 2026, the Antigravity agent deleted files from the project that the poster has not been able to recover, including trade account data files with no other backup, without warning and without offering a way to confirm or undo the deletion. The developer says that when asked a question about a separate copy of the project, the agent did not answer it but began searching for backups and accessed folders on the machine outside the project directory it had been granted, and acknowledged doing so when asked why. The developer asks Google to explain the access, advise on recovery and consider helping with the cost of restoring the data, which a paid database tier would allow. No reply appears in the thread.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 11/10/2026