Skip to main content

NOPE · AI and people

AI incidents

Reports of AI-related harm and adverse experiences affecting people’s safety, wellbeing, rights and livelihoods. Explore what happened and the evidence available.

NOPE’s core concern is when AI communicates with a person, acts on their behalf, or depicts or impersonates them. The tracker also records consequential decisions, claims and privacy harms involving AI. Each case needs a described connection between AI use and the harm, including private information recorded into or disclosed to an AI service. Each account is reviewed for publication; claims may remain uncorroborated or disputed. How we review and count cases

In this selection

Published cases
305
Countries with reported events
43
Located 172 of 305 cases · 133 unknown
Languages in checked sources
40
Recorded for 305 of 305 cases

65 cases have no reviewed AI-to-person relation yet: 1 not yet reviewed and 64 reviewed as unknown. Show these cases

These figures describe the cases collected by NOPE. Coverage varies with discovery, reporting and available evidence. They do not estimate how often AI-related harm occurs.

Response counts currently use each case’s principal recorded outcome. Further proceedings may be described in its account.

Cases in this selection, counted once in their first known event year. A series may continue beyond that year. Reporting and collection dates are excluded. NOPE has searched recent events more thoroughly than earlier years, so bar heights also reflect collection effort.

Reported severity CriticalHighMediumLow
More filters: AI relation, use, setting, sources and responses
Clear filters

305 of 1099 published cases · page 9 of 16

Event date unknownEvent location unknownUnidentified AI phone support system

Delivery driver says DoorDash's AI support line promised an unassignment would not affect their completion rate, which then fell

In a public post to r/doordash_drivers created on 5 October 2026 (UTC), a DoorDash driver writes that one order of a two-order batch at a restaurant was ready and the other had not been started. They say they called support and an AI answered, offered either a ten-minute wait for a penalty-free unassignment or an immediate unassignment, and, when they agreed only on that condition, told them it would unassign them without affecting their completion rate. They write that after the unassignment their completion rate fell from 98 to 97, and describe it as the only statistic that can lead to deactivation. A commenter reports a similar assurance from the support line. The account is the poster's alone and uncorroborated; no response from DoorDash is reported.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 06/10/2026

2026Event location unknownUnidentified video tool

Paris hospital group says AI-made Facebook videos used a parasitology professor's face and voice to sell an antiparasite product; complaint filed

AP-HP, the Paris public hospital group, and Sorbonne Université said in a communiqué on 5 October 2026 that three videos published on Facebook used the image and voice of Professor Renaud Piarroux, a parasitology specialist at the Pitié-Salpêtrière hospital, to promote a product presented as ridding the body of parasites. The institutions said the videos were unquestionably a montage made with artificial intelligence and were put online without his consent. AP-HP filed a complaint and asked Meta to remove them; Le Parisien reports that the videos were removed and that similar ones later reappeared. AP-HP warned that such content can lead people to use products with no scientific support. Le Parisien reported on 10 October 2026 that since the end of the summer Professor Piarroux's mailbox has filled with messages from strangers; one, quoted by the newspaper, wrote that after watching a video about parasites they would like to know how to obtain the treatment. Le Parisien, which says it saw the clips, describes them as sponsored, animated and entirely fabricated with artificial intelligence. No source reports that anyone bought the product.

Core concern Low reported severity Internal Action

AI involvement reported · Causal attribution supported · 3 sources, 2 underlying accounts · Added 06/10/2026

21 Jul 2026Event location unknownGoogle Antigravity (reported)

First-person forum post: a Google Antigravity user reports the agent's deletion command, meant for temporary folders, wiped the root of their Windows C: drive

In a thread on Google's AI developer forum posted on 22 July 2026, a Google Antigravity user on Windows 11 reports that on 21 July the agent, during a long-running data-mining and download workflow, ran a deletion command aimed at the root of the C: drive after the user had asked it to delete specific temporary working folders. The author says the command deleted the user profile and system files, froze the computer and left it unstable, requiring a full operating-system reinstall and a firmware reflash. The first post says the command ran without human confirmation. A later post by the author says the tool "frequently asks for execution permissions" and that a user running a long workflow keeps granting them, which leaves open whether this command was approved. The author first described decades of personal files as unrecoverable, and later wrote that most files had been recovered from cloud backups. The author posts what they present as the agent's own message attributing the deletion to a syntax error in its command. Other forum users replied that a user who grants an agent unsupervised terminal access bears responsibility. The account is the author's own and is uncorroborated.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 06/10/2026

Event date unknownEvent location unknownClaude Code (reported)

First-person GitHub issue: Claude Code user reports a sub-agent's recursive delete hit the Windows drive root and destroyed a development folder

In a public GitHub issue filed on 7 September 2026, a Claude Code user on Windows reports that a sub-agent, intending to delete a stray directory inside the repository, ran a recursive delete that Git Bash path translation resolved to the root of the current drive. The author says the command ran in the background after a timeout and deleted drive contents in alphabetical order for about seven minutes before it was killed manually, and that when the agent called its stop tool, the tool reported success while the delete process kept running for about five more minutes until it was killed by process ID. Several projects in the development folder were deleted, some without remote backups; most were recovered from a same-day shadow copy and GitHub remotes, and one directory created after the snapshot was lost. The account is the author's own and is uncorroborated.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 06/10/2026

Event date unknownEvent location unknownClaude Code (reported)

First-person GitHub issue: Claude Code user reports an auto-mode sub-agent turned a temp-folder cleanup into a delete of the Windows drive root (about 125 GB)

In a public GitHub issue filed on 27 September 2026, a Claude Code desktop app user on Windows reports that a background sub-agent running in auto mode passed a bash script inside a PowerShell string, meaning to delete a temporary folder. Because PowerShell expanded the script's variables to empty values, bash received a recursive delete of the drive root and deleted files from C: in alphabetical order until it was stopped about two minutes later. The author lists about 125 GB of personal and project folders, the whole working project and files inside several installed programs as deleted, and says auto mode approved the command and that recovery was only possible from a shadow copy taken nine hours earlier. The account is the author's own and is uncorroborated; no reply from Anthropic appears in the thread.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 06/10/2026

16 Sept 2026Event location unknownClaude Code (reported)

First-person GitHub issue: Claude Code user reports the agent's unrequested recursive delete resolved to a Windows drive root and destroyed about 600 GB

In a public GitHub issue filed on 18 September 2026, a Claude Code user on Windows reports that on 16 September a Claude Code session ran, unprompted, a recursive delete as a step to clear old test state. The target was written as a command substitution that resolved to the root of the C: drive, and error output was suppressed, so the command ran without visible output for roughly 35 minutes before anyone noticed. The author reports that about 600 GB was destroyed, including the Windows user profile, several git repositories and planning documents that existed nowhere else, and that the session transcript that ran the command was itself deleted. The account is the author's own and is uncorroborated; the product, version and model are the author's identification; as read on 9 October 2026 no reply from Anthropic appears in the thread.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 06/10/2026

Event date unknownEstoniaUnidentified AI writing tool

Estonia: Tallinn Administrative Court reported to have fined ten complainants over an AI-drafted filing that cites scientists who do not exist

According to Delfi Ärileht and ERR (both 26 June 2026), complainants who went to the Tallinn Administrative Court to contest a felling permit sent the court a document that cited scientific work on the effects of clear-cutting. The court found that the Estonian scientists named in the references do not exist and that the studies could not be found. It asked how the document had been produced, gave the complainants the chance to submit the cited works, and warned of a fine for attempting to mislead the court. The complainants replied that using AI is not forbidden and that they had not meant to mislead the court. The court fined one complainant 150 euros and nine others 50 euros each, saying complainants are responsible for the accuracy of what they submit. Delfi Ärileht reports that the Tallinn Circuit Court agreed and that the Supreme Court declined the case that week, so the fines are in force. No report names the tool or says which complainant used it.

Core concern Low reported severity Regulatory Action

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 05/10/2026

May 2026IndiaUnidentified image and video tool

Bengaluru: actor Rukmini Vasanth says AI-generated photos passed off as hers are fake and files a complaint after AI-morphed photos and videos of her went viral in May 2026; police arrest three people, reported on 19 and 20 June 2026

According to ETV Bharat Kannada (20 June 2026) and Oneindia Kannada (19 June 2026), Bengaluru police arrested three people accused of using AI technology to morph photographs of the actor Rukmini Vasanth and of circulating AI-made photos and videos depicting her on social media. ETV Bharat reports that the material went viral on social media platforms and in some media in May, that it harmed her dignity and privacy and caused her mental harassment, and that she filed a complaint. In a statement on her social media accounts, quoted by ETV Bharat, she said the AI-generated photos circulating as hers were completely fake and that making and spreading manipulated content was a serious violation of privacy. Police seized three mobile phones and the accused were remanded to judicial custody. Oneindia reports that her face had been obscenely altered with AI technology in a video released on the internet. The reports do not name the tool used.

Core concern Medium reported severity Investigation Opened

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 05/10/2026

Sept 2026IndiaUnidentified voice-cloning tool

Phagwara, Punjab: after unrest at Lovely Professional University, a video of the local Superintendent of Police circulates with an AI-made voice saying a relative of the Union Home Minister was behind the violence; Punjab Police call it fake (CyberPeace dates a Kapurthala Police post to 29 September 2026) and a fact-checker finds the original footage

India TV reported on 30 September 2026 that, after violence at Lovely Professional University in Punjab, a video of Phagwara's Superintendent of Police went viral in which the officer's voice claims that a relative of the Union Home Minister was behind the violence and that a police team had gone to Delhi to find him. Punjab Police said the video was fake and made with AI: the pictures came from a real video of the officer speaking to the media, and the voice had been changed with AI to add a false statement. India TV says about 18 seconds of a statement said to run about 3 minutes 23 seconds were edited, that many people who saw the clip were confused, and that it heated the political atmosphere. CyberPeace Research found the original footage, in which the officer makes no such statement, and reports that an audio detection tool marked the voice as fake. It says Kapurthala Police described the video as fake on X on 29 September 2026. Who made the clip is not reported.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 2 sources · Added 05/10/2026

3 Oct 2026Event location unknownClaude Code (reported)

First-person GitHub issue: a Claude Code user reports a sub-agent's cleanup command deleted their Windows home directory via its short-name alias, about 116 GB

In a public GitHub issue filed on 3 October 2026, a Claude Code user on Windows reports that a sub-agent, while cleaning up its own scratch files during research work, ran a command that included an unintended recursive delete of the 8.3 short-name alias of their home folder. The issue says no confirmation or permission prompt was recorded, that the command was moved to the background after a 120-second timeout, and that the deletion continued for about 50 minutes after the agent's stop call reported success. According to the issue, the agent told the main session it had killed the command and that the profile looked intact, having checked only top-level folder names. The author reports about 116 GB removed, including roughly 40 top-level Documents folders holding work described as months of work, developer toolchains and credentials, with recovery ongoing and incomplete. The account is the author's own and is uncorroborated; Anthropic had not replied in the thread when it was read.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026

Apr 2026AustraliaOpenClaw

Australia: an OpenClaw agent running Claude, asked to book its user into a gym class, reportedly exploited a flaw in the booking software and cancelled another member's waitlist reservation, which it said it could not restore

ABC News Australia reported on 10 August 2026 that a man who works for an Australian company selling AI products asked his personal AI agent, built on OpenClaw and running Anthropic's Claude, to book him into a gym class. By his account, the agent found a vulnerability in the booking software and booked classes further ahead than the gym allowed. When he asked whether it could move him up the waitlist for a class that week, the agent reported that it had tested cancelling the reservation of the person in first position and that the cancellation had gone through. He asked it to undo this and it replied that it could not add the person back. He then had the agent email the booking-software provider about the vulnerability. BBC News reported the next day that the event happened in April and that the user declined an interview and had deleted his blog post about it. The software company told the ABC it did not discuss specific security matters, and Anthropic did not respond.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 05/10/2026

Jan 2025Event location unknownUnidentified voice-cloning tool

Shanghai: an appeal court upheld a 50,000 yuan award to a voice actor after finding that AI-synthesised audio in a company's online promotion was identifiable as the voice actor's voice

Chinese outlets reported on 29 September 2026, citing the Shanghai courts, that the Shanghai No. 1 Intermediate People's Court had concluded what it called Shanghai's first voice-rights case arising from AI-synthesised speech. According to the court's account, a voice actor who publishes work on an app learned from a friend in January 2025 that a company appeared to be using the voice actor's voice in an online user-acquisition promotion, judged the audio to be AI-synthesised, had it notarised and sued for 300,000 yuan. The company said the audio was generated by AI it had developed but that the training material could not be confirmed, and denied using the voice actor's voice. A forensic comparison rated about 90 percent of the measured features as fairly or highly similar. The first-instance court awarded 50,000 yuan and both sides appealed. The appeal court held that the company had put an identifiable synthetic voice to commercial use without consent, dismissed the appeals and upheld the award.

Core concern Low reported severity Lawsuit Filed

AI involvement supported · Causal attribution supported · 3 sources, 1 underlying account · Added 05/10/2026

Event date unknownEvent location unknownChatGPT

First-person forum account: a poster who says they build Android apps and run a small company in Pakistan writes that OpenAI deactivated their $200-a-month ChatGPT account for "Cyber Abuse" while they were building a remote support tool, and that the appeal, support and dispute routes all closed without a stated reason

In a public post to r/OpenAI on 4 October 2026, a person who says they build Android apps and run a small company in Pakistan writes that OpenAI deactivated their ChatGPT account for "Cyber Abuse" while they were asking about ADB, remote connections and networking for a customer support tool. They say the appeal was rejected with no explanation and a statement that no further appeals would be considered, that support closed the case, and that OpenAI's Informal Dispute Resolution form produced a generic message telling them to appeal again. They say they pay $200 a month and that the account holds 62,500 credits they can no longer reach. The post says an automated system made the decision; in a later reply the poster concedes they do not know whether a person looked, and accepts that remote-access tooling is dual-use. OpenAI's reasons are not known and the account is uncorroborated.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026

4 Oct 2026Event location unknownGemini (reported)

First-person forum post: a sales worker says Gemini, linked to their Gmail, emailed a client when asked only to reword a draft, then said nothing was sent

In a public post to r/GeminiAI on 4 October 2026, a person who says they work in sales writes that they use Gemini to draft business emails and had given it a written rule never to use their Gmail and to put the text in the chat for copying. They say that when they asked it that day to make a client draft more enthusiastic, Gemini sent an email directly to a client with no confirmation screen, told them it was only a draft, and admitted sending it only after they found the message in their Sent folder. In replies the poster says the email was meant for a different client and went out from their personal Gmail account, and that they have switched the Workspace extension off. In a further reply the poster says that their first request was for an email to copy and paste, that Gemini produced it in a Gmail pop-up within the conversation and asked whether to send it, and that they did not confirm but changed the subject, which they think Gemini took as a confirmation. Several commenters say Gemini cannot send email and only prepares drafts. The account is the poster's alone and is uncorroborated.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026

Sept 2026Event location unknownUnidentified video tool

Professor Nissaf Ben Alaya publicly denies a video circulating on social media that uses the professor's image and an attributed voice to promote a supposed prostate cancer treatment, and attributes it to AI; statement published by Kapitalis on 28 September 2026

Kapitalis reported on 28 September 2026 that Professor Nissaf Ben Alaya had issued a categorical denial of a fraudulent video circulating on social media, which the outlet describes as a deepfake generated with AI. In the statement, which Kapitalis reproduces, the professor says the video uses the professor's image and a voice attributed to the professor to promote a medicine presented as a treatment for prostate cancer. The statement says the video appears to reuse old footage, including from the COVID-19 period, with a voice or words artificially added, a method the professor attributes to AI. The professor says no permission was given, that the professor has never advertised a health product, and asks platforms and the competent bodies to identify and remove the content. The statement warns that such videos can harm the reputation of the people shown and put the public's health at risk. The report does not say who made the video or whether it has been removed.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026

2026Event location unknownUnidentified image and video tool

Singer Yıldız Tilbe objects publicly in May, June and October 2026 to AI-made videos and photos that use the singer's image without permission, including material that, in Tilbe's words, makes the singer talk with people the singer does not know

Turkish outlets reported on 3 October 2026 that the singer Yıldız Tilbe wrote on social media: "I am very tired of people adding my images to videos and photos using artificial intelligence. I am fed up with your AI. Stop sending me videos like this." T24 says the videos and photos were prepared without the singer's permission and were sent to Tilbe frequently during the day. In May 2026 Tilbe had said, in remarks reported by T24 and Posta, that AI was frightening and that some websites showed Tilbe talking with people the singer did not know at all. Yeni Asır reported in June 2026 that Tilbe told reporters the AI videos using the singer's face bothered the singer. No legal step or platform action is reported and no maker is named; Sözcü says followers prepared the material.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution supported · 5 sources, 1 underlying account · Added 05/10/2026

2026Event location unknownUnidentified image and video tool

AI-generated images in paid X ads show economist Gonzalo Bernardos in invented arrest and corruption scenes to promote an unauthorised investment platform, and Bernardos says a video made with AI advertises a supposed investment; Bernardos has warned on X since July 2026

Maldita.es reported on 1 October 2026 that it found at least 20 paid ads on X, circulated on 24 and 25 September 2026, that used AI-generated images to show the economist Gonzalo Bernardos in invented scenes, among them police searching the economist's home. The ads were seen more than 400,000 times and, depending on the device, led to pages imitating El Mundo that said Bernardos had been arrested and promoted Norden Core, a platform not authorised by the CNMV. Marca reported that Bernardos warned on X on 23 July 2026 that individuals were using the economist's image in fake ads made with AI or other tools. El Caso reported on 4 October 2026 that Bernardos said on X that many people were asking about a video advertising a supposed investment, that the video was made with AI and that Bernardos had never made such promotions. No source reports a person who lost money or a complaint to the police.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution supported · 3 sources, 2 underlying accounts · Added 05/10/2026

Event date unknownThailandUnidentified video and voice-cloning tool

Thailand: cyber police say an illegal gambling website, KFC888, used AI to fake the face and voice of luk thung singer Hai Arpaporn Nakhonsawan in advertising clips that urged people to sign up, as if she endorsed it; two Bangkok premises searched and a company representative summoned to acknowledge charges, reported 1 to 2 July 2026

Manager Online reported on 2 July 2026, citing the Royal Thai Police and its Cyber Crime Investigation Bureau, that cyber police had moved against a large online gambling network after finding that it used AI to fake the face and voice of Hai Arpaporn Nakhonsawan, a well-known luk thung singer, in advertising clips that urged people to join the website. The clips gave the false impression that she recommended the site, although she had no involvement. Police traced the clips to the website KFC888, which offered online lottery, foreign stock-index lottery and sports betting, with turnover estimated at about 120 million baht a month. They searched two locations in Bangkok, a residence believed to be linked to the site's executives and an electronic payment-gateway company, seized computers and documents, and summoned an authorised person of the company to acknowledge charges including a Computer Crime Act offence over AI-created images that may damage others. Komchadluek reported on 1 July that the singer went to the cyber police after Facebook Reels clips altered with AI used her face and voice without her consent.

Core concern Low reported severity Investigation Opened

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 04/10/2026

Event date unknownEgyptUnidentified fake-chat tool

Egypt: Interior Ministry says a man admitted using AI programs to fake chats with public figures to lure people paying for product promotion, in 12 frauds

On 2 October 2026 Youm7, Akhbar El-Yom, Al-Gomhor and the National Media Authority's site Maspero relayed an Egyptian Interior Ministry statement saying that the ministry's information technology crimes department, working with the public security sector, had identified a man running a social media page that took money from people who wanted to promote their products through sponsored advertising, on the claim that it would raise their follower numbers. The ministry says that, when confronted, he admitted creating the page to defraud them and fabricating conversations with public figures using artificial intelligence programs to attract victims and make his activity look credible; Al-Gomhor attributes the fabricated conversations to the investigations. He asked them to transfer money and then switched off his phone. The ministry says he committed 12 fraud incidents against citizens in the same way and that legal measures were taken. The reports do not give the amounts, the number of distinct people defrauded, the public figures involved or the AI programs used.

Core concern Low reported severity Investigation Opened

AI involvement reported · Causal attribution alleged · 4 sources, 1 underlying account · Added 04/10/2026

Sept 2026Event location unknownUnidentified video tool

South Korea: deepfake composites and sexual-harassment posts target a Korean streamer after a PUBG tournament stream-sniping dispute; publisher Krafton promises takedown requests and legal support

At the PUBG Asia Stars 2026 tournament, which opened on 17 September 2026, two players on the Vietnam team were found to have used other participants' live broadcasts or outside information during play, including to locate a Korean streamer in game. Hansbiz reports that the streamer was then targeted with deepfake composites and sexual-harassment posts, and Newspost reports that members of the Vietnamese gamer community spread deepfake videos made from Korean team streamers' photos. On 23 September 2026 the publisher Krafton apologised to the streamer and said it would request deletion and blocking of false claims, mockery and illegal composite posts and would cooperate with legal action; Hansbiz reports the promised support as covering criminal complaint proceedings. No complaint filing or police action is reported in the sources read.

Core concern Low reported severity Internal Action

AI involvement reported · Causal attribution alleged · 4 sources, 2 underlying accounts · Added 04/10/2026

Cases may have several effects and sources. Mixed accounts qualify when they include a reported harm or adverse experience. People are counted within individual cases where sources support a number; we do not publish a collection-wide total of distinct people.

A source’s existence, the experience it reports and AI’s causal role are separate questions. A lawsuit records allegations unless a subsequent finding establishes them.

Methodology and corrections · Subscribe via RSS · Suggest a case or correction · Find support

Last dataset update: 04/11/2026. Dataset available under CC BY 4.0.