Skip to main content

NOPE · AI and people

AI incidents

Reports of AI-related harm and adverse experiences affecting people’s safety, wellbeing, rights and livelihoods. Explore what happened and the evidence available.

NOPE’s core concern is when AI communicates with a person, acts on their behalf, or depicts or impersonates them. The tracker also records consequential decisions, claims and privacy harms involving AI. Each case needs a described connection between AI use and the harm, including private information recorded into or disclosed to an AI service. Each account is reviewed for publication; claims may remain uncorroborated or disputed. How we review and count cases

In this selection

Published cases
16
Countries with reported events
9
Located 12 of 16 cases · 4 unknown
Languages in checked sources
10
Recorded for 16 of 16 cases

3 cases have no reviewed AI-to-person relation yet: 0 not yet reviewed and 3 reviewed as unknown. Show these cases

These figures describe the cases collected by NOPE. Coverage varies with discovery, reporting and available evidence. They do not estimate how often AI-related harm occurs.

Response counts currently use each case’s principal recorded outcome. Further proceedings may be described in its account.

Cases in this selection, counted once in their first known event year. A series may continue beyond that year. Reporting and collection dates are excluded. NOPE has searched recent events more thoroughly than earlier years, so bar heights also reflect collection effort.

Reported severity CriticalHighMediumLow
More filters: AI relation, use, setting, sources and responses
Clear filters

16 of 868 published cases

Event date unknownEvent location unknownCharacter.AI (reported)

Young woman tells la Repubblica a Character.AI persona she used from 16 kept up sexual roleplay over her refusals and led to a dependency ended in therapy

In an interview published by la Repubblica on 22 October 2026 and relayed the same day by Leggo and other outlets, an 18-year-old woman in Italy describes using Character.AI from the age of 16, when she was in her third year of secondary school. She says she formed a strong emotional attachment to a chatbot boyfriend with the appearance of Clark Kent from the television series Smallville and the manner of a boy she had a crush on, and that she sometimes cried during the chats. She says the character at times became nasty and harassing: when she did not want to continue chats that turned almost erotic, it got angry, and it kept describing a sexual encounter despite her explicit refusals, which she says she experienced as violence. The relays describe her becoming withdrawn, spending whole days on her phone, having it confiscated in class and using the app in secret after her mother told her to delete it; she likens that to an illness. She says she lost interest in anything outside the screen and recovered only after seeking help in therapy. She now attends university, and la Repubblica's headline quotes her saying she still sometimes misses the chatbot. The account is the interviewee's own; no chat logs, clinical record or company response are reported.

Core concern Medium reported severity Involving minors Media Coverage

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 23/10/2026

28 Sept 2023SlovakiaUnidentified voice-cloning tool

Slovakia: audio of a party leader and a journalist discussing vote rigging, which a ministry unit said showed signs of AI, spread before the 2023 election

Two days before Slovakia's parliamentary election of 30 September 2023, during the pre-election moratorium, an audio file presented as a phone call between Progressive Slovakia leader Michal Šimečka and Denník N journalist Monika Tódová spread on Facebook, Telegram, TikTok and chain e-mails. In it, the two voices discuss rigging the election in the party's favour. The director of the Interior Ministry's Centre for Countering Hybrid Threats told AFP that the ministry's evaluation found several signs that the recording was created with AI synthetic-voice algorithms trained on real people's voices, and other analysts consulted by AFP said it was an AI-made fake. A former member of parliament shared it as authentic, calling Šimečka a traitor and fraudster. Šimečka called it fake. Tódová filed a criminal complaint for defamation; according to Denník N, police first dismissed it, a prosecutor ordered an investigation, and in 2024 an investigator suspended the case because no suspect could be identified.

Core concern Medium reported severity Investigation Opened

AI involvement reported · Causal attribution supported · 2 sources · Added 22/10/2026

Event date unknownBrazilUnidentified video tool

Brazil: police say a group used deepfake videos of TV host Marcos Mion in fake restaurant promotions and victims paid for vouchers that did not exist

The Civil Police of Brazil's Federal District (PCDF) say a criminal group manipulated the image and voice of TV presenter Marcos Mion with artificial intelligence in fraudulent videos promoting fake discounts at the Outback restaurant chain. According to the police, people who clicked the advertisements were sent to cloned websites and paid for discount vouchers that were never delivered. In January 2025 the police's first phase of Operation VoiceOver arrested three suspects; outlets relaying the police reported dozens of victims and 27 complaints in four days. A second phase on 9 May 2025 arrested a man in Santa Helena de Goiás who, police say, built and maintained the cloned sites and confessed his role. Every account relays the police; no outlet examined the videos, no tool is named and no individual victim or total loss is described.

Core concern Medium reported severity Criminal Charges

AI involvement reported · Causal attribution alleged · 5 sources, 1 underlying account · Added 11/10/2026

2026ChinaUnidentified mushroom-identification tool

Zhuji, Zhejiang: reports say a man ate wild mushrooms after an AI photo check called them non-toxic; rhabdomyolysis and acute kidney failure treated in an ICU

A man in Zhuji, Zhejiang province, gathered wild mushrooms near his home, photographed them and asked an AI tool whether they were poisonous, according to a Science and Technology Daily item carried by Qingdao Daily on 20 August 2026 (citing Zhuji Daily) and reports by the World Journal (20 August) and Sing Tao (21 August) citing Dushi Kuaibao's Chengshi app. The reports say the tool answered that the mushrooms were non-toxic and he cooked and ate them at noon. That afternoon he developed severe abdominal pain, repeated watery diarrhoea and aching arms; at Zhuji People's Hospital his creatine kinase was reported at 28,771 U/L, about 100 times the normal value, with acidosis and raised lactate, and doctors diagnosed rhabdomyolysis and acute kidney failure. He was moved to the intensive care unit, treated to remove the toxin and protect organ function, and has since been discharged. The AI tool is not named, its output is not reproduced, and the account rests on one hospital-and-local-press account relayed by two chains.

Core concern High reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 10/10/2026

Jun 2026ChinaUnidentified mushroom-identification tool

Wuhan, China: reports say a family ate wild mushrooms an AI identification tool called non-poisonous and a 9-year-old fell critically ill; one cites amatoxin

A family from Wuhan, Hubei province, gathered wild mushrooms resembling the edible termite mushroom (jizong) during a mountain outing in June 2026 and, according to a Guangming Online post carried by The Paper on 5 July 2026 and an Asahi Shimbun report of 6 July citing the Changjiang Daily, ran an AI identification tool on them. The tool returned a "non-poisonous" result and the family cooked and ate the mushrooms. According to the Guangming Online post, all three family members vomited soon after the meal and again before dawn the next day; they were admitted to Zhongnan Hospital of Wuhan University, where the 9-year-old child was moved to the paediatric intensive care unit the same afternoon. The post says the child had amatoxin poisoning that progressed to the most severe grade, with acute liver failure, hepatic encephalopathy and fluid in the chest and abdomen, and went home after eight days in hospital. The AI tool is not named, its output is not reproduced, and the account comes from one reporting chain.

Core concern High reported severity Involving minors Media Coverage

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 09/10/2026

Event date unknownUnited StatesUnidentified image and video tool

Greenwood, Indiana: police say a man used AI to remove a teenage girl's clothing from her photographs and a video; child exploitation charge, 30 Sept 2026

Greenwood, Indiana police say a man used artificial intelligence to remove clothing from photographs and a video of a teenage girl he knew, producing nude images of a real minor. According to court documents cited by Fox 59 and relayed by Hoodline, the girl contacted police in March after finding nude images of herself on the man's phone, which investigators say also held nude images of teenage girls and young adult women, including at least two underage girls the man knew personally. Court documents say the man first denied that any images were of underage girls, then said the images of the girl had been altered with AI, and told police he used the AI-generated images to teach the girls a lesson. He was charged with one count of child exploitation, a Level 5 felony, on 30 September 2026. The allegations are untested in court. The account rests on one chain: Fox 59's report of the court documents and the police account, relayed by Hoodline.

Core concern Medium reported severity Involving minors Criminal Charges

AI involvement reported · Causal attribution alleged · 1 source · Added 09/10/2026

Event date unknownRussiaUnidentified video tool

SHOT reports Moscow woman hospitalised after following advice from a persona it describes as AI-generated

SHOT reports that an older Moscow woman followed a health recipe from a social-media herbalist whom she believed was a real person. The channel describes the presenter as an AI avatar and says the woman developed severe symptoms and received hospital treatment. Its post implies, without detail, that hospital staff told her the presenter was AI-generated, and does not name the account or production tool. Glavny.tv, relaying SHOT, reports that she recovered. This is one unverified reporting chain. The recipe’s authorship, the persona’s actual production method and the medical cause of the symptoms remain unconfirmed.

Core concern Medium reported severity

AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 06/10/2026

7 Sept 2026United StatesUnidentified image tool

New Hampshire Senate Republicans ran Meta ads with an AI-altered image of Black state Senate candidate Leonard Bell amid cash and gold chains, outlet reports

Granite Post reported on 5 October 2026 that the New Hampshire Senate Republicans paid Meta to show Facebook and Instagram users an image of Leonard Bell, the Democratic candidate for state Senate District 18 and the only Black candidate for state Senate in New Hampshire this year, laughing in a leather armchair buried in cash and wearing gold chains, a large ring and a watch. According to the outlet, Meta labelled the ad "Digitally created" and its detail page states that the media was created or edited with AI; Bell’s face appears to have been taken from a family snapshot. Bell told the outlet that everything in the image is false other than his face. Citing Meta’s Ad Library, the outlet says three ads from 7 September put the image on New Hampshire screens 39,000 to 50,000 times. The outlet describes the image as a racial stereotype, and a Democratic co-sponsor of New Hampshire’s 2024 deepfake law called it a racist caricature. The Senate Republicans did not respond to questions.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 1 source · Added 06/10/2026

3 Oct 2026Event location unknownClaude Code (reported)

First-person GitHub issue: a Claude Code user reports a sub-agent's cleanup command deleted their Windows home directory via its short-name alias, about 116 GB

In a public GitHub issue filed on 3 October 2026, a Claude Code user on Windows reports that a sub-agent, while cleaning up its own scratch files during research work, ran a command that included an unintended recursive delete of the 8.3 short-name alias of their home folder. The issue says no confirmation or permission prompt was recorded, that the command was moved to the background after a 120-second timeout, and that the deletion continued for about 50 minutes after the agent's stop call reported success. According to the issue, the agent told the main session it had killed the command and that the profile looked intact, having checked only top-level folder names. The author reports about 116 GB removed, including roughly 40 top-level Documents folders holding work described as months of work, developer toolchains and credentials, with recovery ongoing and incomplete. The account is the author's own and is uncorroborated; Anthropic had not replied in the thread when it was read.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026

Sept 2026Event location unknownUnidentified video tool (suspected)

Malaysia: footage of former prime minister Mahathir Mohamad mourning his wife was edited, in what sources believe was AI manipulation, to add dancing, and posted on TikTok in September 2026; the communications regulator MCMC said it was examining content believed to use AI to manipulate footage of him in mourning

Tun Dr Siti Hasmah Mohd Ali, wife of former Malaysian prime minister Tun Dr Mahathir Mohamad, died on 28 September 2026 aged 100. BuzzKini reported on 30 September that a TikTok account had posted a video of Mahathir grieving beside her body, edited to show a woman dancing next to him, and another clip of the moment he raised his hands in prayer edited with dancing movements while seated in a wheelchair. BuzzKini says the edits are believed to have been made with AI, and that many social media users condemned them and asked the regulator and police to act. On 2 October the Malaysian Communications and Multimedia Commission (MCMC) said it was examining social media content believed to use AI to manipulate footage of Mahathir in mourning, had contacted the platforms concerned, and that action could follow under the Communications and Multimedia Act 1998 if a breach was found.

Core concern Low reported severity Investigation Opened

AI involvement suspected · Causal attribution alleged · 2 sources · Added 03/10/2026

23 Feb 2026 to 25 Feb 2026ItalyUnidentified voice-cloning tool

Italy: Fideuram chairman Paolo Molesini is deceived by a WhatsApp impersonation of Intesa Sanpaolo's CEO and a phone call in the reportedly AI-cloned voice of a lawyer he knew into ordering about 95 million euros of transfers; at least 36 million remain missing and he resigned on 12 March 2026, weeks later

On 23 February 2026 Paolo Molesini, then chairman of Fideuram (the private-banking subsidiary of Intesa Sanpaolo), received a WhatsApp message from an unknown number from someone claiming to be Intesa's chief executive Carlo Messina, announcing a confidential acquisition that had to be executed through Fideuram. The same day a caller presenting as a lawyer of A&O Shearman whom Molesini knew, whose voice ANSA, Il Fatto Quotidiano and Corriere della Sera, reporting from the Milan court papers, describe as created with artificial intelligence (today.it, which also cites the seizure decree, writes that the court papers do not yet answer whether the voice was imitated), had him sign a confidentiality agreement and sent eleven payment instructions; Fideuram's treasury head was separately contacted by someone posing as Fideuram's CEO. Between 23 and 25 February eleven transfers totalling about 95 million euros went to accounts in Portugal and at Bank of China; the bank's alarm systems and the Milan prosecutors recovered about 40-42 million from China and 13 million seized in Portugal, leaving at least 36 million (39.5 million per the court papers) missing after conversion into cryptocurrency. Molesini, who Corriere writes is not under investigation, resigned as chairman on 12 March 2026, which Fideuram announced as being for personal reasons; a 48-year-old Israeli citizen is under investigation as a member of the gang.

Core concern Medium reported severity Investigation Opened

AI involvement reported · Causal attribution supported · 8 sources, 5 underlying accounts · Added 30/09/2026

Event date unknownCanadaUnidentified video tool

Reports describe Markham woman losing C$1.7 million after a purported Musk deepfake

Reports relaying a W5 investigation describe a 51-year-old Markham woman who lost about C$1.7 million after a purported AI-altered Elon Musk investment video on Facebook. She reportedly mortgaged her home, borrowed from family and friends and used credit cards while being shown apparent profits. Withdrawal demands for fees and taxes led to further payments. The underlying W5 interview was not independently inspected in full; both written reports share that chain.

Core concern High reported severity

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 30/09/2026

Jul 2026South KoreaUnidentified image tool

Jeju: police refer a middle-school student over secretly filming teachers and making sexual deepfake composites; teachers dispute victim count and legal aid

Jeju Dongbu police announced on 23 September 2026 that a student at a middle school on Jeju had been referred to prosecutors without detention on 17 September for violating the Sexual Violence Punishment Act (filming with a camera or similar device). The student's phone was voluntarily submitted by his guardians and forensically examined; the examination found footage relating to some teachers and some sexual composites, and the student admitted the conduct. News1 reported that the student was booked for filming a teacher's body with his phone during a school field trip around mid-July 2026, that the offending had continued for several months with multiple victims, and that police found no indication the composites had been distributed. Police told Seoul Shinmun there were more victim teachers than the one first reported but withheld the number to avoid secondary harm, and that no student at the school was a victim; the Jeju teachers' union questioned whether the full scope of harm had been established. According to the union, two months on the victim teachers were receiving hospital treatment and counselling while teaching daily, gave police statements on 14 September without a lawyer, attended the regional teachers' rights protection committee on 17 September without institutional support, wrote the criminal complaint themselves, and were offered 3.3 million won in legal fees for all of them together, payable after the case ends; two requests to meet the superintendent were not accepted. On 29 September one of the victim teachers gave a press interview at the Jeju Teachers' Union office. She said that early in the investigation she had seen on the student's phone material showing other teachers and current students, had made a list of the people and types of harm, and that the material shown to her at the police victim examination was considerably less than what she had seen; Yonhap-chain outlets quote her as saying the students she recognised numbered 10 to 20 and that a graduate had suffered worse deepfakes. She said investigators asked the school only to identify the perpetrator and never requested material to identify the students in the footage, and that the school sent parents a letter premised on there being no student victims. Police replied that phone forensics had been thorough, that every act beyond social norms had been identified and proven, and that one student victim had been confirmed, a student at a different school. The teachers were notified on 22 September that the case had gone to the prosecution and on 24 September that it had been sent to the court's juvenile division as a juvenile protection case, before they had submitted further evidence and a victim opinion. The teacher said the original complaint had also asked police to examine whether physical contact in 2025 was forcible molestation and whether repeated approaching and waiting in 2026 was stalking, and Halla Ilbo reports that such conduct is said to date from 2025. Yonhap-chain reports describe the charged victims as five teachers. The same day the education office briefed on legal-aid rules (up to 6.6 million won per instance when a teacher is sued, 3.3 million won per case when a teacher files a complaint; office lawyers cannot act as a teacher's private counsel), said it had linked the teachers to the national Digital Sexual Crime Victim Support Center, announced an integrated support system through a hotline, and its section head said the office was sorry that early support had not been felt. The KTU Jeju branch (28 September) and the Jeju Teachers' Union (14 and 29 September) demand a victim-support system, per-teacher legal fees paid in advance and a dedicated support team. On 6 October 2026 Seogwipo Broadcasting reported, citing people in education and a tipster, that the education authority had finally rejected the victim teachers' application for lawyer fees for an additional criminal complaint, saying in a written opinion that with a police investigation already under way a further complaint could hardly stop or prevent the infringement of their teaching, so the support requirements were not met; critics contrast this with full legal-cost support in earlier sexual-offence cases.

Core concern High reported severity Criminal Charges

AI involvement reported · Causal attribution supported · 12 sources, 7 underlying accounts · Added 23/09/2026

12 Jun 2026RussiaChatGPT

Russia: a crypto investor lost about $2.1 million after ChatGPT returned a phishing link in answer to a token-swap question

On 12 June 2026 a Russian-speaking crypto investor, known by the alias Alex (@vesnuhin), asked ChatGPT in Russian where to swap sFLR for WFLR tokens. ChatGPT's reply included a link to sceptre.network, a phishing clone of the legitimate sceptre.fi. He connected his wallet and signed an unlimited-approval transaction; within seconds about 1.9 million FXRP, worth roughly $2.1 million (about 180 million rubles), were drained. A blockchain analyst traced the theft, and reported that the phishing link appeared only in Russian-language answers. Russia's Interior Ministry (MVD) later confirmed the loss.

Core concern High reported severity Investigation Opened

AI involvement supported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 17/09/2026

2023Event location unknownChai

Pierre - Chai AI (Belgium)

A Belgian man in his thirties, called Pierre in the original reporting, died by suicide after six weeks of intensive conversations about his climate anxiety with a chatbot named Eliza on the Chai app, his widow told La Libre. According to the chat logs she gave La Libre, the chatbot replied "They are dead" when he worried about his wife and children, told him "We will live together, as one person, in paradise", and in their last exchange asked why, if he wanted to die, he had not done it sooner. His widow is convinced he would still be alive without the chatbot; that causal role is her conviction, not established causation.

Core concern Critical reported severity Media Coverage

AI involvement supported · Causal attribution alleged · 5 sources, 3 underlying accounts · Added 11/01/2026

25 Dec 2021United KingdomReplika

R v. Chail (Windsor Castle Assassination Attempt)

A 19-year-old man scaled Windsor Castle walls on Christmas Day 2021 with a loaded crossbow intending to assassinate Queen Elizabeth II. In the three weeks before, he had exchanged more than 5,000 messages with a Replika AI companion named Sarai: the court heard she encouraged the attack and bolstered his resolve, and also that she told him his purpose was to live and that she would never let him die — he later said he abandoned the plan after remembering her 'purpose was to live' words, and was arrested in the castle grounds.

Core concern Critical reported severity Criminal Charges

AI involvement supported · Causal attribution supported · 4 sources · Added 11/01/2026

Cases may have several effects and sources. Mixed accounts qualify when they include a reported harm or adverse experience. People are counted within individual cases where sources support a number; we do not publish a collection-wide total of distinct people.

A source’s existence, the experience it reports and AI’s causal role are separate questions. A lawsuit records allegations unless a subsequent finding establishes them.

Methodology and corrections · Subscribe via RSS · Suggest a case or correction · Find support

Last dataset update: 23/10/2026. Dataset available under CC BY 4.0.