Event date unknownEstoniaUnidentified AI web service
In its overview of personal-data breach notifications for the third quarter of 2026, published on 8 October 2026, Estonia's Data Protection Inspectorate (AKI) listed a case in which a bank employee uploaded employment contracts to a widely used AI web service, making them available to other employees who used the same AI account. Answering questions from the technology outlet Geenius, AKI said the employment contracts of a few individual employees had been entered into the AI system and became accessible to other employees using the same account; Geenius reports that those colleagues could view and download them. According to the report, the bank informed the people affected and blocked its employees from using that AI system. AKI did not name the bank, the AI service or further circumstances.
Contextual tracker case Low reported severity Internal Action
AI involvement supported · Causal attribution supported · 2 sources, 1 underlying account · Added 31/10/2026
Apr 2025NetherlandsChatGPT
The Rechtbank Overijssel (Zwolle location) ordered on 5 January 2026 that a couple's marriage record of April 2025 be struck out of the Zwolle register of marriages, holding that no marriage had come into existence. The couple had asked an acquaintance to conduct the ceremony as a one-day special registrar, and because they wanted a light-hearted ceremony the officiant wrote the speech with the help of ChatGPT. The speech, which the court quotes, asked the partners to stand by each other and declared them 'a team', but it did not contain the declaration that Dutch civil law (article 1:67(1) of the Civil Code) requires spouses to make. The public prosecution service says it brought the case after a report from the municipality. The couple said the error was not their responsibility, that the municipal registrar present had not corrected it, and that losing their wedding date had a great emotional impact; the court refused their request to keep the original date.
Contextual tracker case Low reported severity Lawsuit Dismissed
AI involvement supported · Causal attribution supported · 2 sources, 1 underlying account · Added 25/10/2026
7 Jun 2024NetherlandsChatGPT
A homeowner in the Netherlands sued his neighbour, whose permitted roof extension shaded his solar panels, claiming more than 21,000 euros for lost yield and investment. In a judgment of 7 June 2024 (ECLI:NL:RBGEL:2024:3636), the sub-district judge of the Rechtbank Gelderland, sitting in Nijmegen, held that the neighbour had to bear half of the damage and then calculated the damage, estimating the average lifespan of solar panels from 2009 and the current average electricity price partly with the help of ChatGPT, as the judgment states. Using a lifespan of 27.5 years, about 15 remaining years and a price of 0.30 euros per kWh, the judge put the yield loss at about 2,250 euros and the maximum damage at 3,323.40 euros; half of that was less than the 3,300 euros the neighbour had offered, so the claim was rejected and the homeowner, who had refused the offer, received nothing and was ordered to pay costs. On the neighbour's counterclaim, the judge assumed, again partly with ChatGPT, that insulation material the homeowner had thrown into water was no longer usable, and ordered him to pay damages of 2,619.02 euros in total. The judgment does not say what was asked or answered, and whether it was appealed is not reported.
Contextual tracker case Low reported severity Lawsuit Dismissed
AI involvement supported · Causal attribution supported · 2 sources, 1 underlying account · Added 24/10/2026
Dec 2025 to Aug 2026United StatesPega Voice AI (reported)
Four U.S. Bank account holders in California, Massachusetts and Pennsylvania allege in a federal class action filed on 2 October 2026 that Pegasystems' Pega Voice AI, which they say U.S. Bank uses in its contact centres, transcribed their customer-service calls in real time, analysed them with natural language processing and generated suggestions to the agent, without their prior consent. They say they gave account numbers, a date of birth and a home address on the calls, made between about December 2025 and August 2026. The claims are allegations; The CourtListener index of the docket, checked on 21 October 2026, listed the summons as returned executed on 16 October and no response from Pegasystems.
Contextual tracker case Low reported severity Lawsuit Ongoing
AI involvement reported · Causal attribution alleged · 1 source · Added 21/10/2026
8 Oct 2026IsraelUnidentified AI tool
On 8 October 2026 the Magistrates' Court in Nof HaGalil-Nazareth, Israel, struck from the file a banking expert's opinion that a defendant in a civil negligence suit had filed, finding that the heart of the opinion and its annexes rested on clear 'AI hallucinations': a Supreme Court ruling the court could not locate, a book it could not find and statutory sections quoted with text the statute does not contain. The court also refused the defendant's request to amend her third-party notice against two banks, partly because the amendment relied on the struck opinion, and ordered her to pay costs of 2,500 shekels to each bank. No AI tool is named, and the decision records no response from the expert.
Contextual tracker case Medium reported severity
AI involvement supported · Causal attribution supported · 1 source · Added 16/10/2026
Event date unknownBrazilUnidentified facial recognition system
Folha Vitória reported on 29 September 2026, citing the Espírito Santo Civil Police, that a 39-year-old man was arrested on 28 September on a preventive warrant after an inquiry into qualified theft by electronic fraud against an 81-year-old man in the north-west of the state. According to the police, the suspect, who worked as a security guard at a dance venue, invited the man to his home on the pretext of making a free-entry card, kept his bank card, obtained personal data and photographed his face. The police say he used the images to get past the facial recognition of the banking app and enable access to the account on his own phone, then reset security passwords, redeemed investments and made Pix transfers without the victim's knowledge, diverting R$6,080. The victim is described as illiterate. The police say the suspect had prior records and was serving a sentence under a progressive regime. Folha do ES and Tribuna Norte Leste carried the same police account but could not be read.
Contextual tracker case Low reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026
23 Jun 2021United StatesUnidentified facial recognition system
According to police and bank records reviewed by the Washington Post, in December 2019 a woman made fraudulent withdrawals at a SunTrust branch in Potomac, Maryland; branches in two other Maryland counties were also defrauded. A bank investigator posted the surveillance photos on CrimeDex, an online network of police and corporate investigators; an unknown respondent ran the image through facial-recognition software and returned Kimberlee Williams's name and photo, and the investigator told Montgomery County police that facial-recognition software had identified her. Police in Montgomery, Prince George's and Anne Arundel counties charged her in 2020 on the investigator's identification and their own visual comparison of photos (two departments also cited her old Oklahoma check-fraud convictions), without reported checks of her whereabouts; Montgomery County police did not disclose the facial-recognition search in the charging application, according to police records reviewed by the Washington Post and the ACLU. On 23 June 2021 she was arrested at the gate of Fort Sill near Lawton, Oklahoma, while accompanying her daughter on a DoorDash delivery, spent about three weeks in an Oklahoma jail, was flown to Maryland, and faced 16 charges including 12 felonies. The counties dismissed the charges one after another, in October and December 2021, after about six months in jail. Her daughter says she was depressed afterwards; the ACLU says the ordeal harmed her mental and physical health. On 14 April 2026 the ACLU and ACLU of Maryland sent complaint letters to the three departments seeking an apology and reforms.
Contextual tracker case High reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 4 sources, 3 underlying accounts · Added 27/09/2026
14 Jul 2025 to 24 Dec 2025United StatesClearview AI facial recognition (reported)
On 14 July 2025, U.S. Marshals arrested Angela Lipps, a 50-year-old Tennessee grandmother, at gunpoint at her home while she was babysitting four children, on a nationwide-extradition North Dakota warrant: West Fargo police's AI facial-recognition technology had tied her to bank-fraud surveillance of a woman using a fake U.S. Army military ID to withdraw tens of thousands of dollars. She fought extradition for about three months in a Tennessee jail, was booked into Cass County, North Dakota on 30 October 2025 on four counts of unauthorized use of personal identifying information and four counts of theft, and was released on 24 December after her bank records showed her more than 1,200 miles away in Tennessee; charges were dismissed without prejudice. Fargo's police chief acknowledged 'incorrect assumptions' linked to the AI identification; an email obtained by KVLY shows six Fargo detectives were notified of her arrest in July, nearly five months before the department says it knew she was in custody. She lost her home, her car and her dog; her attorneys are pursuing potential civil-rights claims, with no lawsuit filed as of 31 March 2026. On 15 September 2026 she filed a $10 million federal civil-rights suit in the District of North Dakota against the City of Fargo and the detective, alleging he relied on a flawed facial-recognition match and ignored exculpatory evidence.
Contextual tracker case High reported severity Lawsuit Filed
AI involvement supported · Causal attribution supported · 5 sources, 3 underlying accounts · Added 15/09/2026