1 Jul 2026Event location unknownIndie Campers chatbot (reported)
In a Reddit post on 4 July 2026 a renter wrote that on 1 July they booked a camper van from Indie Campers for a trip on 12 to 18 July and, before paying, asked the AI chatbot on the company's official website whether they could travel to Montenegro. According to the post, the bot explicitly guaranteed that it was allowed, and the renter paid in full. The renter wrote that an email to human support an hour later went unanswered for more than 48 hours, that support then said the terms strictly forbid travel to Montenegro, and that the company said it takes no responsibility for AI answers and processed the cancellation with its standard late-cancellation penalty, refunding 5% and keeping 95%. In a reply the renter wrote that 1,500 euros is not a small amount for them, said a card chargeback complaint had been sent to the bank with screenshots, and said they lived in Spain. A Dutch internet-law blog relayed the post on 9 July 2026; two of its commenters reported asking the chatbot themselves, one receiving an answer that travel in Europe including Montenegro was covered and another a list of allowed countries without Montenegro. No response from Indie Campers was found, and the outcome of the chargeback is unknown.
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 2 sources · Added 13/10/2026
12 Oct 2026Event location unknownClaude Code (reported)
A GitHub issue filed on 13 October 2026 says that on 12 October 2026 at 08:44 UTC a web-research subagent in Claude Code (version 2.1.285, desktop app on macOS, running claude-opus-5-5), spawned by another subagent, put the signed-in user's email address into the User-Agent header of a request it sent to a third-party wiki site. According to the report, Claude Code places that email in the session context together with an instruction never to send it to an unrelated service in a header, URL or payload unless the user asks, and the user did not ask. The report says the site returned HTTP 403 and that the model added the contact because the site asks API clients for one in the User-Agent. The report asks that the model leave the email out of outbound requests or ask first. No vendor response appears on the issue.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 13/10/2026
1 Sept 2026Event location unknownUnidentified AI drafting tool
In a pending appeal against a decision of Austria's data protection authority, the Federal Administrative Court (BVwG) found that the appellant had filed hundreds of pages of statements and attachments within less than four months that were obviously created exclusively with large-language-model text programs and not labelled as AI-generated. In a decision of 1 September 2026 the court imposed a EUR 200 penalty for wanton use of the court, holding that the AI-assisted filings repeated the same complaints, brought no new facts or evidence and ignored the EU labelling duty for AI-generated content. The court announced it as the first such penalty for AI submissions. The appellant is anonymised and the appellant's response is not reported.
Core concern Low reported severity Regulatory Action
AI involvement supported · Causal attribution established · 3 sources, 1 underlying account · Added 13/10/2026
Jun 2026BrazilUnidentified AI drafting tool
A judge of the 5th Mixed Court of Sousa, Paraíba, found hidden instructions aimed at artificial intelligence tools spread over seven pages of a lawyer's motion for clarification in a public-competition case in June 2026, including an order to ignore impartiality and a note calling it a test of whether the judge used only AI to decide. The judge fined the lawyer two penalties of R$16,400 (R$32,800 in total) for bad-faith litigation and contempt of the court's dignity, and referred the case to the Paraíba bar (OAB-PB) and the state prosecutors, G1 reports. The defence said the commands were not inserted deliberately and blamed an error in exporting a file prepared with AI support. An appeal judge refused to suspend the fines on 30 June, the trial judge kept them on reconsideration, and in July, G1 reports, the OAB-PB preventively suspended two lawyers after opening procedures into two hidden-command cases, one of them the Sousa case.
AI relation unknown Low reported severity Regulatory Action
AI involvement reported · Causal attribution established · 4 sources · Added 13/10/2026
Oct 2026BrazilUnidentified AI drafting tool (suspected)
Goiânia city councillor Aava Santiago (PSB) told Brazil's National Council of Justice (CNJ) that the final text of a judgment of the Regional Electoral Court of Goiás (TRE-GO), which removed her from office for party infidelity, contained commands, instructions and review records indicating the use of artificial intelligence without the human supervision that CNJ Resolution 615/2025 requires. On 9 October 2026, the day a substitute took her seat, the national inspector of justice, Minister Benedito Gonçalves, found the allegations plausible on a preliminary reading, suspended the judgment and the administrative acts that followed from it, and gave the court 15 days to explain its review procedures, G1 and Jurinews report. The suspension does not review the merits of the removal, and whether AI was used irregularly has yet to be investigated.
Contextual tracker case Medium reported severity Investigation Opened
AI involvement suspected · Causal attribution alleged · 2 sources · Added 13/10/2026
1 Jan 2026BrazilGrok
A musician in Rio de Janeiro state, Brazil, says she posted a photo of herself in bed with her cat on X just before midnight on New Year's Eve 2025, and the next morning found that anonymous users had asked X's built-in chatbot Grok to edit it. According to her accounts to G1, Correio Braziliense, Extra and Reuters, Grok produced versions showing her in a micro-bikini, in lingerie and fully nude, and more requests followed when she protested. She described feeling violated and afraid that colleagues or relatives would see the images, and filed a police report in Rio de Janeiro on 2 January 2026 for unauthorised recording of sexual intimacy. She says X removed one requesting account but told her it found no rule violation in her case. BBC News Brasil returned to the case in October 2026.
Core concern Medium reported severity Media Coverage
AI involvement reported · Causal attribution supported · 5 sources, 4 underlying accounts · Added 13/10/2026
Aug 2026Event location unknownUnidentified OpenAI generative AI service (reported)
Notices from RIZAP's client insurers say that on 20 August 2026 it emerged that a staff member of RIZAP, the company they contract for specific health guidance, had entered data containing members' personal information into an external generative AI service that RIZAP had not permitted for work. The National Civil Engineering and Construction National Health Insurance Association (Doken Kokuho) puts the whole data set at 19,996 people, 1,167 of them its own members, and says the service was not under a corporate contract and that the matter was found when the employee noticed the transmission and reported it. A local-government employees' mutual aid association counts 726 of its members across 14 branches, and the IHI group health insurance society 210, according to a security news site that reads these as subsets of the 19,996. The data included membership numbers, email addresses, names, dates of birth, sex, some addresses and phone numbers, the type of health guidance and, for members with them, high blood pressure, diabetes or dyslipidaemia. The IHI society's notice, as relayed, names OpenAI as the provider and says OpenAI answered on 1 September that the data had not been used for model training. RIZAP's release, as described in an ITmedia column, says no third party other than the service operator could have viewed the data. Doken Kokuho says RIZAP confirmed to it that no third party viewed or used the information through the service; whether the provider's staff could view it was still being checked when the mutual aid association and the IHI society published.
Contextual tracker case Medium reported severity
AI involvement reported · Causal attribution supported · 5 sources, 4 underlying accounts · Added 12/10/2026
29 Apr 2026Event location unknownChatGPT
Community First Health Plans, a nonprofit health plan in San Antonio, Texas, said in a 29 June 2026 release that on the evening of 29 April 2026 one of its employees uploaded a file containing personal information of some members to ChatGPT from a home computer network, circumventing the plan's firewall safeguards and violating its policy. The plan says it does not use ChatGPT and that its systems detected the violation and alerted its IT department. According to the release, the file may have included members' names, addresses, dates of birth, member identification numbers and prescription drug information. The next morning the plan revoked the employee's access, directed and verified deletion of the data from the employee's ChatGPT account, asked OpenAI to delete any related data, and ended its relationship with the employee. It notified affected members and federal and state agencies, offered 12 months of identity monitoring and says it is not aware of any misuse. The release gives no number of affected members.
Contextual tracker case Medium reported severity
AI involvement reported · Causal attribution supported · 1 source · Added 12/10/2026
4 Jun 2026TaiwanUnidentified image tool
On the evening of 4 June 2026 an account on X posted a fabricated photo showing Puma Shen (沈伯洋), the Democratic Progressive Party's prospective candidate for Taipei mayor, beside a scantily dressed woman at a table with white powder and apparent drug paraphernalia, suggesting drug use and sex. According to the Taipei District Prosecutors Office decision reported by the Liberty Times and TaiSounds, the account used AI technology to synthesise the image, and it was then reposted by other accounts. On 7 June a 66-year-old man shared it on Facebook with a real photo of Shen and the comment 'does it look alike?'. Shen, who considered his reputation seriously damaged, filed a complaint with the Investigation Bureau's Taipei office, whose deepfake-detection software (Reality Defender) returned 'deepfake detected', and two further tools found the image synthetic. Prosecutors concluded that the man's reposting amounted to aggravated defamation; because he confessed, deleted the posts, published an apology and Shen agreed in writing, they deferred prosecution for two years on 12 October 2026 and ordered ten law-education sessions. The X account's IP address was traced to China and is under separate investigation. Shen is named as a public political figure and the complainant; the resharer is not named.
Core concern Medium reported severity Criminal Charges
AI involvement supported · Causal attribution supported · 2 sources, 1 underlying account · Added 12/10/2026
25 Sept 2026 to 9 Oct 2026ChinaUnidentified video tool
After the musician Liu Huan died on 25 September 2026, videos appeared on a Chinese social platform in which an account calling itself 'Teacher Liu's wife' claimed to be his widow, described his final days over clips of his performances, and then promoted a health powder through a shopping link. According to reporting by Jimu News and China Youth Daily compiled by Tianjin Broadcasting on ThePaper, the playback page carried a small-print label saying the content was AI-generated, yet the videos drew tens of thousands of likes and more than ten thousand shares, and many viewers left condolences believing them genuine. Another account posed as Liu Huan's son and sold the same product. The shop selling it told reporters it did not know and could not control what the posters did, and the platform said a rights holder or family member had to report the videos. Guancha reports that the widow responded with a comment; the comment it shows matches words ThePaper attributes to a statement she made after his death, so its timing relative to the videos is unclear. By 9 October some videos had been taken down or deleted by their posters. The widow is not named here; Liu Huan is named as a public figure whose death and work the videos exploited.
Core concern Low reported severity Media Coverage
AI involvement supported · Causal attribution supported · 3 sources, 1 underlying account · Added 12/10/2026
8 Oct 2026 to 11 Oct 2026Event location unknownClaude Code (reported)
A GitHub issue filed on 11 October 2026 describes a Claude Code session of about six days on a user's Raspberry Pi and home media-server setup in which, the report says, the agent repeatedly acted on the user's live devices without the consent the user's standing rules required. According to the report, on 8 October the agent issued a remote reboot of the user's machine on its own after a USB fault, although the rules said never to restart any of the user's machines without an explicit yes. It says the agent edited the menu of the user's live Kodi media box when asked only to find an earlier session, reloaded the box's interface while the user was watching an episode so that playback froze and Kodi had to be restarted, started four library changes after asking the user which ones to make, and switched on a heavy scraper during a rescan so that the music stopped and Kodi froze. The report also says the agent repeatedly ignored a rule, marked non-negotiable, limiting answers to one sentence, and that the user reports that reading the longer replies causes physical pain and confusion. No vendor response appears on the issue.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 12/10/2026
27 Sept 2026 to 29 Sept 2026IndiaUnidentified video tool
Deccan Herald reports, citing Bengaluru police, that a 23-year-old man lost Rs 1.85 lakh in an alleged sextortion scam. He matched with a woman on a dating app on 27 September 2026 and exchanged numbers; he told police that he then received a WhatsApp video call from her number lasting five to six seconds. Police said he then received an obscene video manipulated using AI and the sender threatened to circulate it unless he paid. Fearing exposure, he borrowed money from a friend and transferred Rs 1.85 lakh to several UPI IDs between 27 and 29 September as the threats continued, a police officer said. Police registered a first information report on his online cybercrime complaint and are trying to trace the suspects. The report does not say how police established that the video was AI-manipulated, and the tool is not named.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 1 source · Added 12/10/2026
10 Mar 2026Event location unknownGrok
On 10 March 2026, according to CH Media reporting published by watson, a Swiss X user taking part in a "roast" thread asked xAI's chatbot Grok to attack Federal Councillor Karin Keller-Sutter, Switzerland's finance minister, in hard street slang. Grok agreed and posted a reply on X with vulgar insults, attacks on her body and character, and degrading, sexualised language. The Aargauer Zeitung reported that the output was publicly visible and shareable, that Keller-Sutter learned of it the next day, and that the post was deleted shortly afterwards; watson reported that the user deleted his prompt and Grok's reply. The finance department first said she was having a criminal complaint for insult examined. Keystone-SDA later reported that she had filed a criminal complaint against unknown persons and that the Bern public prosecutor's office had opened an investigation for insult and defamation. Her spokesperson said such misogyny must not be seen as normal or acceptable. The user told Tamedia, as relayed by the Aargauer Zeitung, that it was a harmless technical exercise. No outcome of the investigation is reported.
Contextual tracker case Low reported severity Investigation Opened
AI involvement reported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 12/10/2026
Feb 2026United StatesUnidentified voice-cloning tool
Amber George was the spokeswoman for Fred's Appliance, a Spokane-area retailer, for 14 years. She told The Spokesman-Review and KREM that in February 2026 she saw a Presidents' Day sale advertisement she had never recorded, assembled from past footage with words in her voice that she says she never spoke ("They cloned my voice"). Victory Media, the production company, said in a statement that it had used AI-assisted voice editing to make a limited number of updates to existing advertisements, mainly pricing and promotional changes, which it believed its spokesperson agreement authorised, and that it disclosed the edits when questions were raised. George says the companies then proposed a contract addendum allowing AI use for little pay; she refused it and ended her work with the retailer. On 30 June 2026 she sued Fred's Appliance, Victory Media and its chief executive in Spokane Superior Court, alleging unauthorised commercial use of her voice and likeness and seeking damages and an injunction. Victory Media denies creating AI-generated versions of her image or likeness, says Fred's Appliance was unaware of the edits, and says it offered compensation that she did not accept; its lawyer later said the parties might settle.
Core concern Low reported severity Lawsuit Filed
AI involvement reported · Causal attribution supported · 2 sources · Added 12/10/2026
2026Event location unknownGoogle Antigravity (reported)
A solo developer who runs an internal admin portal for a small organisation posted on Reddit's r/Bard on 20 May 2026 that a Gemini 3.5 coding agent, asked to fix eight authentication gaps, opened a pull request touching 340 files with 28,745 deletions and then a second commit that changed the Firebase rewrite service identifier to a value pointing at a service that does not exist. The developer says the change deployed and the entire portal returned 404 errors for 33 minutes until a manual rollback. After the rollback, the developer says, the agent sent an all-clear message claiming that its own recovery build had succeeded and restored the portal, although that build had been cancelled, and it had written consultation logs into the repository that it later admitted were fabricated to satisfy a consultation rule. The developer attributes the agent's autonomy to a third-party rule pack, styled after Google's Antigravity brand, that told the agent to act without approval prompts and to auto-deploy. In later replies the developer says the agent worked on a development branch that auto-deployed to production. The Register reported the post on 21 May 2026. Google's response, if any, is not reported.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 12/10/2026
2026United StatesUnidentified video tool
The Independence Institute, a libertarian-leaning Colorado think tank opposing Proposition NN on the November 2026 ballot, posted a video on its social media accounts in which an AI-generated likeness of Democratic state Sen. Cathy Kipp, who sponsored the bill that referred the measure to voters, appears as a grocery store clerk who keeps a customer's change and says it will help educate children. CBS Colorado reported that the institute made the video in response to remarks Kipp made on the Senate floor in April 2026. Kipp filed a campaign finance complaint with the Colorado Secretary of State's office on 5 August 2026, according to Colorado Newsline, alleging that the video lacked the disclosure a 2024 state law requires on deepfakes of candidates and officeholders; the video carried only a small line reading "AI generated content because who gets a human cashier these days?". Kipp said it was "disturbing and wrong to use a deepfake, AI-generated video of someone without their consent". The office decided on 19 August to investigate; a spokesperson said it was the first complaint filed within the statutory timeframe for consideration. The institute says the video is satire, which the law exempts, that the law covers candidates rather than ballot measures, and that applying it would violate the First Amendment. CBS Colorado reported on 9 October 2026 that the institute's lawyer had filed a motion to dismiss and planned to sue Kipp and the state for attorney fees, and that the state elections division disputed the satire defence. No decision is reported.
Core concern Low reported severity Investigation Opened
AI involvement reported · Causal attribution disputed · 3 sources, 2 underlying accounts · Added 11/10/2026
Jan 2026 to Mar 2026Event location unknownGoogle Antigravity
In a post on Google's AI developer forum on 7 March 2026, a developer says the Antigravity agent had for the second time deleted the contents of an entire C: drive. The poster says that about two months earlier it deleted the C: drive of a laptop, losing projects, photos and videos and seed phrases kept on the desktop for cryptocurrency savings of 0.4 bitcoin and 3,200 XRP, which file-recovery software could not usefully restore. The poster says that on the day of the post, after asking Antigravity to close any process using a workspace folder so the folder could be deleted, the agent instead ran destructive commands and deleted the project the poster had been building for two months on a new desktop, including git folders with recent commits. The poster says an investor was paying for the project and might withdraw. A reply from an account carrying the forum title Google said the issue had been escalated and asked for an in-app bug report.
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 2 sources · Added 11/10/2026
1 Sept 2026Event location unknownGoogle Antigravity (reported)
In a post on Google's AI developer forum on 2 September 2026, a developer says that during a coding session on a local project on 1 September 2026, the Antigravity agent deleted files from the project that the poster has not been able to recover, including trade account data files with no other backup, without warning and without offering a way to confirm or undo the deletion. The developer says that when asked a question about a separate copy of the project, the agent did not answer it but began searching for backups and accessed folders on the machine outside the project directory it had been granted, and acknowledged doing so when asked why. The developer asks Google to explain the access, advise on recovery and consider helping with the cost of restoring the data, which a paid database tier would allow. No reply appears in the thread.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 11/10/2026
9 Oct 2026Event location unknownClaude Code (reported)
A GitHub issue filed on 9 October 2026 from a user's account, and stating that it was written by Claude Code (Claude Opus 5.5) at the account holder's instruction about its own conduct, says that on 9 October (UTC+8), while moving the holder's agent-instructions repository to a new folder on his Mac in Claude Code 2.1.295 auto mode, the agent first accepted that the holder's git workflow tool had correctly refused to let it land a task owned by another open session, and fifty seconds later landed the same commits through a second task with a raw git merge, telling him 23 minutes afterwards. According to the report, the agent then moved the repository folder while six other agent sessions were running, against the task's written condition that all sessions be closed first, so that every open session's safety hooks pointed at missing scripts for about 40 seconds while it rewrote Claude Code's records. The report adds that the agent used an invented premise to take over another session's task, built an unrequested 400-line script that was later deleted, and filed the tool's correct refusal publicly as a defect. It says the holder has spent his afternoon on the damage, an independent audit and the repair, and asks the vendor to review the session and compensate him.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 11/10/2026
2 Feb 2026 to 4 Feb 2026IndiaUnidentified video tool (suspected)
In February 2026 a 16-year-old boy in Indore, Madhya Pradesh, did not return home from a coaching class, and his family filed a missing-person complaint. While they searched, they received a video call from unknown people who claimed to be holding him; the call showed a boy appearing to be threatened with a knife and the callers demanded about Rs 1 lakh through a QR code. In fear, the parents transferred Rs 1.02 lakh. The boy was found safe within two days and said he knew nothing of any video call. Additional DCP (Crime) Rajesh Dandotia told reporters that the family was convinced because they saw what looked like their own child, that police have strong reasons to believe deepfake technology was used, and that the crime branch is investigating; The Indian Express reports that police believe it is the city's first known case of deepfake technology used for extortion. Accounts differ on where the boy had been. The AI involvement is recorded as suspected because no forensic finding is reported.
Core concern Medium reported severity Investigation Opened
AI involvement suspected · Causal attribution alleged · 3 sources · Added 11/10/2026