Event date unknownEstoniaUnidentified AI web service
In its overview of personal-data breach notifications for the third quarter of 2026, published on 8 October 2026, Estonia's Data Protection Inspectorate (AKI) listed a case in which a bank employee uploaded employment contracts to a widely used AI web service, making them available to other employees who used the same AI account. Answering questions from the technology outlet Geenius, AKI said the employment contracts of a few individual employees had been entered into the AI system and became accessible to other employees using the same account; Geenius reports that those colleagues could view and download them. According to the report, the bank informed the people affected and blocked its employees from using that AI system. AKI did not name the bank, the AI service or further circumstances.
Contextual tracker case Low reported severity Internal Action
AI involvement supported · Causal attribution supported · 2 sources, 1 underlying account · Added 31/10/2026
Event date unknownBrazilUnidentified facial recognition system
Folha Vitória reported on 29 September 2026, citing the Espírito Santo Civil Police, that a 39-year-old man was arrested on 28 September on a preventive warrant after an inquiry into qualified theft by electronic fraud against an 81-year-old man in the north-west of the state. According to the police, the suspect, who worked as a security guard at a dance venue, invited the man to his home on the pretext of making a free-entry card, kept his bank card, obtained personal data and photographed his face. The police say he used the images to get past the facial recognition of the banking app and enable access to the account on his own phone, then reset security passwords, redeemed investments and made Pix transfers without the victim's knowledge, diverting R$6,080. The victim is described as illiterate. The police say the suspect had prior records and was serving a sentence under a progressive regime. Folha do ES and Tribuna Norte Leste carried the same police account but could not be read.
Contextual tracker case Low reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026
Event date unknownBrazilUnidentified video tool
Three Mato Grosso do Sul outlets, all crediting BNC Notícias, reported on 10 April 2026 that a rural producer from Paraíso das Águas fell for the so-called Viva Sorte scam. In a video call, scammers used AI deepfake technology to simulate the image and voice of Renato Ambrósio, the presenter of the Viva Sorte prize draws, told the farmer a prize had been won and set out steps to release it: Pix transfers, sending the CPF tax number and sharing the phone screen while the banking app was open. The farmer followed the instructions and took out a R$360,000 loan; with interest, the total loss exceeded R$700,000. One report says the farmer gave this account to the police. The farmer is not identified, no date is given and no arrest is reported.
Core concern Medium reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 04/10/2026
Event date unknownUnited StatesUnidentified video tool
A public Reddit family account says a mother trusted someone posing as Owen Wilson, despite her daughters' warnings. The poster says the contact moved from a game to WhatsApp and sent a video as proof of identity, while offering a supposed Warner Bros job and plans for a shared home. LADbible describes that attached video as AI-generated. The mother reportedly received small training payments and had not been asked for money or banking information. No financial loss is established.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 30/09/2026