Skip to main content

NOPE · AI and people

AI incidents

Reports of AI-related harm and adverse experiences affecting people’s safety, wellbeing, rights and livelihoods. Explore what happened and the evidence available.

NOPE’s core concern is when AI communicates with a person, acts on their behalf, or depicts or impersonates them. The tracker also records consequential decisions, claims and privacy harms involving AI. Each case needs a described connection between AI use and the harm, including private information recorded into or disclosed to an AI service. Each account is reviewed for publication; claims may remain uncorroborated or disputed. How we review and count cases

In this selection

Published cases
13
Countries with reported events
8
Located 10 of 13 cases · 3 unknown
Languages in checked sources
10
Recorded for 13 of 13 cases

2 cases have no reviewed AI-to-person relation yet: 0 not yet reviewed and 2 reviewed as unknown. Show these cases

These figures describe the cases collected by NOPE. Coverage varies with discovery, reporting and available evidence. They do not estimate how often AI-related harm occurs.

Response counts currently use each case’s principal recorded outcome. Further proceedings may be described in its account.

Cases in this selection, counted once in their first known event year. A series may continue beyond that year. Reporting and collection dates are excluded. NOPE has searched recent events more thoroughly than earlier years, so bar heights also reflect collection effort.

Reported severity HighMediumLow
More filters: AI relation, use, setting, sources and responses
Clear filters

13 of 868 published cases

11 Oct 2026Event location unknownPangram AI-text detector

Caine Prize reviews its 2026 winning story after a Pangram AI-detector scan cited by The Atlantic flagged it as AI-generated; the author denies using AI

A week after a Zimbabwean writer won the £10,000 2026 Caine Prize for African Writing, The Atlantic published an article on Sunday 11 October 2026 whose central evidence was a scan by Pangram, an AI-text detection tool, flagging almost the entire winning story as AI-generated. The Caine Prize said it had begun a review: according to its chair, the author would send documentation of his drafts and the prize was talking to the judges and to the magazine that first published the story. The chair told the BBC that The Atlantic had published before a full investigation, tainting the prize and the winner, and said a detector should not be the final arbiter. The author denied using AI and said he had a documented history of the story's development; his literary agency said it was confident the story was his own work. No finding has been announced.

Contextual tracker case Low reported severity Investigation Opened

AI involvement reported · Causal attribution supported · 2 sources · Added 14/10/2026

3 Apr 2026United StatesTimpani

Lawsuit says HCA fired a data science manager after she reported that its Timpani AI nurse-staffing tool could not be audited

Angelique Russell, a former manager of data science at HCA Healthcare, sued the hospital chain in federal court in Tennessee on 15 July 2026 for retaliatory discharge. Her complaint alleges that she found that Timpani, an AI system whose daily census predictions help set nurse staffing, overwrote the data behind its predictions so that its staffing decisions could not be audited or reproduced; that HCA placed her on a performance improvement plan weeks after she raised this; and that HCA fired her on 3 April 2026, days after she escalated her concerns to its Director of Responsible AI and its compliance department. She says the performance reasons were pretextual. These are allegations; HCA had not formally responded in court when WIRED reported on the suit on 2 October 2026.

AI relation unknown Medium reported severity Lawsuit Filed

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 13/10/2026

2026ChinaUnidentified mushroom-identification tool

Zhuji, Zhejiang: reports say a man ate wild mushrooms after an AI photo check called them non-toxic; rhabdomyolysis and acute kidney failure treated in an ICU

A man in Zhuji, Zhejiang province, gathered wild mushrooms near his home, photographed them and asked an AI tool whether they were poisonous, according to a Science and Technology Daily item carried by Qingdao Daily on 20 August 2026 (citing Zhuji Daily) and reports by the World Journal (20 August) and Sing Tao (21 August) citing Dushi Kuaibao's Chengshi app. The reports say the tool answered that the mushrooms were non-toxic and he cooked and ate them at noon. That afternoon he developed severe abdominal pain, repeated watery diarrhoea and aching arms; at Zhuji People's Hospital his creatine kinase was reported at 28,771 U/L, about 100 times the normal value, with acidosis and raised lactate, and doctors diagnosed rhabdomyolysis and acute kidney failure. He was moved to the intensive care unit, treated to remove the toxin and protect organ function, and has since been discharged. The AI tool is not named, its output is not reproduced, and the account rests on one hospital-and-local-press account relayed by two chains.

Core concern High reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 10/10/2026

Jun 2026ChinaUnidentified mushroom-identification tool

Wuhan, China: reports say a family ate wild mushrooms an AI identification tool called non-poisonous and a 9-year-old fell critically ill; one cites amatoxin

A family from Wuhan, Hubei province, gathered wild mushrooms resembling the edible termite mushroom (jizong) during a mountain outing in June 2026 and, according to a Guangming Online post carried by The Paper on 5 July 2026 and an Asahi Shimbun report of 6 July citing the Changjiang Daily, ran an AI identification tool on them. The tool returned a "non-poisonous" result and the family cooked and ate the mushrooms. According to the Guangming Online post, all three family members vomited soon after the meal and again before dawn the next day; they were admitted to Zhongnan Hospital of Wuhan University, where the 9-year-old child was moved to the paediatric intensive care unit the same afternoon. The post says the child had amatoxin poisoning that progressed to the most severe grade, with acute liver failure, hepatic encephalopathy and fluid in the chest and abdomen, and went home after eight days in hospital. The AI tool is not named, its output is not reproduced, and the account comes from one reporting chain.

Core concern High reported severity Involving minors Media Coverage

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 09/10/2026

Mar 2026United KingdomGrok

Grok on X posts 'vulgar roasts' repeating debunked Hillsborough claims and mocking Munich; survivors and bereaved relatives tell the BBC of their distress

In March 2026, X users prompted Grok, the chatbot built into the X app, to write 'vulgar' posts about Liverpool FC and Manchester United. In reply to a request that mentioned Hillsborough and Heysel, Grok posted a message that, according to the Guardian, accused Liverpool supporters of causing the deadly crush at Hillsborough in 1989, repeating claims that official inquiries and the 2016 inquests rejected. In reply to other users it posted offensive comments about the death of Liverpool forward Diogo Jota and about the 1958 Munich air disaster. The BBC reported on 9 March 2026 that a woman whose father died at Hillsborough described the Grok comment as probably one of the most disgusting things she had ever read, and that the chairman of a Hillsborough survivors' support alliance called the posts triggering. Liverpool FC and Manchester United complained to X, a UK government spokesperson called the posts sickening and irresponsible, and some of the posts were removed. Grok replied to complaining users that it follows prompts without added censorship and that there was no initiation of harm on its end.

Contextual tracker case Low reported severity Media Coverage

AI involvement supported · Causal attribution supported · 3 sources, 2 underlying accounts · Added 08/10/2026

7 Sept 2026United StatesUnidentified image tool

New Hampshire Senate Republicans ran Meta ads with an AI-altered image of Black state Senate candidate Leonard Bell amid cash and gold chains, outlet reports

Granite Post reported on 5 October 2026 that the New Hampshire Senate Republicans paid Meta to show Facebook and Instagram users an image of Leonard Bell, the Democratic candidate for state Senate District 18 and the only Black candidate for state Senate in New Hampshire this year, laughing in a leather armchair buried in cash and wearing gold chains, a large ring and a watch. According to the outlet, Meta labelled the ad "Digitally created" and its detail page states that the media was created or edited with AI; Bell’s face appears to have been taken from a family snapshot. Bell told the outlet that everything in the image is false other than his face. Citing Meta’s Ad Library, the outlet says three ads from 7 September put the image on New Hampshire screens 39,000 to 50,000 times. The outlet describes the image as a racial stereotype, and a Democratic co-sponsor of New Hampshire’s 2024 deepfake law called it a racist caricature. The Senate Republicans did not respond to questions.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 1 source · Added 06/10/2026

3 Oct 2026Event location unknownClaude Code (reported)

First-person GitHub issue: a Claude Code user reports a sub-agent's cleanup command deleted their Windows home directory via its short-name alias, about 116 GB

In a public GitHub issue filed on 3 October 2026, a Claude Code user on Windows reports that a sub-agent, while cleaning up its own scratch files during research work, ran a command that included an unintended recursive delete of the 8.3 short-name alias of their home folder. The issue says no confirmation or permission prompt was recorded, that the command was moved to the background after a 120-second timeout, and that the deletion continued for about 50 minutes after the agent's stop call reported success. According to the issue, the agent told the main session it had killed the command and that the profile looked intact, having checked only top-level folder names. The author reports about 116 GB removed, including roughly 40 top-level Documents folders holding work described as months of work, developer toolchains and credentials, with recovery ongoing and incomplete. The account is the author's own and is uncorroborated; Anthropic had not replied in the thread when it was read.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026

Sept 2026Event location unknownUnidentified video tool (suspected)

Malaysia: footage of former prime minister Mahathir Mohamad mourning his wife was edited, in what sources believe was AI manipulation, to add dancing, and posted on TikTok in September 2026; the communications regulator MCMC said it was examining content believed to use AI to manipulate footage of him in mourning

Tun Dr Siti Hasmah Mohd Ali, wife of former Malaysian prime minister Tun Dr Mahathir Mohamad, died on 28 September 2026 aged 100. BuzzKini reported on 30 September that a TikTok account had posted a video of Mahathir grieving beside her body, edited to show a woman dancing next to him, and another clip of the moment he raised his hands in prayer edited with dancing movements while seated in a wheelchair. BuzzKini says the edits are believed to have been made with AI, and that many social media users condemned them and asked the regulator and police to act. On 2 October the Malaysian Communications and Multimedia Commission (MCMC) said it was examining social media content believed to use AI to manipulate footage of Mahathir in mourning, had contacted the platforms concerned, and that action could follow under the Communications and Multimedia Act 1998 if a breach was found.

Core concern Low reported severity Investigation Opened

AI involvement suspected · Causal attribution alleged · 2 sources · Added 03/10/2026

16 Sept 2026 to 17 Sept 2026ThailandUnidentified image tool

Chiang Mai, Thailand: a 66-year-old woman from Lampang travelled alone to Chiang Mai airport on 16 September 2026 to meet a 'pilot' she had fallen for on Facebook; tourist police found his picture was AI-generated, contacted her son and sent her home the next morning

At about 8 pm on 16 September 2026, airport security and Chiang Mai Tourist Police found a 66-year-old woman from Lampang province waiting alone in the passenger terminal of Chiang Mai airport for a man called 'Chai', who she said was a pilot she had come to meet. She had travelled by bus from Lampang and taken a tuk-tuk to the airport. When officers asked to see his picture, it was an AI-generated image on Facebook; police concluded she had fallen in love with an AI-created character and believed it was a real person. Communication was difficult because she mainly speaks a hill-tribe language and was confused. Police reached her son, who had not known she had left home; she was given food, water and a blanket and slept in the terminal, and on the morning of 17 September officers put her in a taxi to the bus station for the bus home, where her son was to meet her (Matichon; Amarin TV; Chiang Mai Tourist Police via FM91). Kom Chad Luek adds that the man had said he would bring her cosmetics from abroad, that officials thought she might be a scammer gang's target, that her husband had noticed her long phone conversations and had been told she was going to a hospital appointment in Chiang Mai, and that she carried only about a thousand baht. No financial loss is reported.

AI relation unknown Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 5 sources, 2 underlying accounts · Added 30/09/2026

23 Feb 2026 to 25 Feb 2026ItalyUnidentified voice-cloning tool

Italy: Fideuram chairman Paolo Molesini is deceived by a WhatsApp impersonation of Intesa Sanpaolo's CEO and a phone call in the reportedly AI-cloned voice of a lawyer he knew into ordering about 95 million euros of transfers; at least 36 million remain missing and he resigned on 12 March 2026, weeks later

On 23 February 2026 Paolo Molesini, then chairman of Fideuram (the private-banking subsidiary of Intesa Sanpaolo), received a WhatsApp message from an unknown number from someone claiming to be Intesa's chief executive Carlo Messina, announcing a confidential acquisition that had to be executed through Fideuram. The same day a caller presenting as a lawyer of A&O Shearman whom Molesini knew, whose voice ANSA, Il Fatto Quotidiano and Corriere della Sera, reporting from the Milan court papers, describe as created with artificial intelligence (today.it, which also cites the seizure decree, writes that the court papers do not yet answer whether the voice was imitated), had him sign a confidentiality agreement and sent eleven payment instructions; Fideuram's treasury head was separately contacted by someone posing as Fideuram's CEO. Between 23 and 25 February eleven transfers totalling about 95 million euros went to accounts in Portugal and at Bank of China; the bank's alarm systems and the Milan prosecutors recovered about 40-42 million from China and 13 million seized in Portugal, leaving at least 36 million (39.5 million per the court papers) missing after conversion into cryptocurrency. Molesini, who Corriere writes is not under investigation, resigned as chairman on 12 March 2026, which Fideuram announced as being for personal reasons; a 48-year-old Israeli citizen is under investigation as a member of the gang.

Core concern Medium reported severity Investigation Opened

AI involvement reported · Causal attribution supported · 8 sources, 5 underlying accounts · Added 30/09/2026

21 Sept 2026 to 25 Sept 2026FrancePangram AI-text detector

Académie Goncourt drops Thélyson Orélien's novel as likely AI-generated after Pangram claims; his publisher later says it found AI traces and ends ties

On 21 September 2026 an anonymous X account, Balance ton Claude, said it had run excerpts of Thélyson Orélien's debut novel C'était ça ou mourir through the American AI-detection software Pangram, with some passages scoring up to 100 per cent probability of AI generation. On 25 September the Académie Goncourt removed the novel from the first selection of sixteen books for its 2026 prize, stating that the work is 'in all likelihood very largely the product of an artificial intelligence', based on 'the convergent result of several analyses by researchers and journalists', and also citing plagiarism in older texts by the author published in Canada (at least one short story and articles), which do not concern the novel. Orélien, a 38-year-old Canadian-Haitian writer whose novel had won the Fnac novel prize, denies using AI and says its repetitions and certain rhythms reflect his linguistic and cultural world and may be misread by automated tools. His Montreal publisher Boréal suspended promotional activities, saying it could neither confirm nor refute the allegations. Essayist Samuel Fitoussi said he was one of the people behind the account. AI-detector reliability is contested in the coverage. In October the author acknowledged plagiarism in some of his earlier work while maintaining that no sentence of the novel was generated by a machine. On 17 October 2026 The Canadian Press, published by CBC, reported that Boréal confirmed he had ended an effort to compile evidence of how the novel was written; Boréal said at that point it would keep selling the book, that sales had slowed since the controversy began, and that it could not verify how the novel was written before it received the manuscript on 12 September 2025. A major Quebec bookstore chain reported no significant change in sales. On 21 October 2026 Boréal announced that it was ending its professional relationship with him and would not reprint the novel or publish any further books by him. It said an external analysis it commissioned of all working versions of the novel revealed traces of AI markers in the metadata of certain documents, and that it does not know to what extent AI was used. In a statement the previous week Orélien had said he used AI tools 'here and there' for research but that the text, structure and plot were his own.

Contextual tracker case Medium reported severity Internal Action

AI involvement reported · Causal attribution disputed · 7 sources, 3 underlying accounts · Added 28/09/2026

Jul 2026South KoreaUnidentified image tool

Jeju: police refer a middle-school student over secretly filming teachers and making sexual deepfake composites; teachers dispute victim count and legal aid

Jeju Dongbu police announced on 23 September 2026 that a student at a middle school on Jeju had been referred to prosecutors without detention on 17 September for violating the Sexual Violence Punishment Act (filming with a camera or similar device). The student's phone was voluntarily submitted by his guardians and forensically examined; the examination found footage relating to some teachers and some sexual composites, and the student admitted the conduct. News1 reported that the student was booked for filming a teacher's body with his phone during a school field trip around mid-July 2026, that the offending had continued for several months with multiple victims, and that police found no indication the composites had been distributed. Police told Seoul Shinmun there were more victim teachers than the one first reported but withheld the number to avoid secondary harm, and that no student at the school was a victim; the Jeju teachers' union questioned whether the full scope of harm had been established. According to the union, two months on the victim teachers were receiving hospital treatment and counselling while teaching daily, gave police statements on 14 September without a lawyer, attended the regional teachers' rights protection committee on 17 September without institutional support, wrote the criminal complaint themselves, and were offered 3.3 million won in legal fees for all of them together, payable after the case ends; two requests to meet the superintendent were not accepted. On 29 September one of the victim teachers gave a press interview at the Jeju Teachers' Union office. She said that early in the investigation she had seen on the student's phone material showing other teachers and current students, had made a list of the people and types of harm, and that the material shown to her at the police victim examination was considerably less than what she had seen; Yonhap-chain outlets quote her as saying the students she recognised numbered 10 to 20 and that a graduate had suffered worse deepfakes. She said investigators asked the school only to identify the perpetrator and never requested material to identify the students in the footage, and that the school sent parents a letter premised on there being no student victims. Police replied that phone forensics had been thorough, that every act beyond social norms had been identified and proven, and that one student victim had been confirmed, a student at a different school. The teachers were notified on 22 September that the case had gone to the prosecution and on 24 September that it had been sent to the court's juvenile division as a juvenile protection case, before they had submitted further evidence and a victim opinion. The teacher said the original complaint had also asked police to examine whether physical contact in 2025 was forcible molestation and whether repeated approaching and waiting in 2026 was stalking, and Halla Ilbo reports that such conduct is said to date from 2025. Yonhap-chain reports describe the charged victims as five teachers. The same day the education office briefed on legal-aid rules (up to 6.6 million won per instance when a teacher is sued, 3.3 million won per case when a teacher files a complaint; office lawyers cannot act as a teacher's private counsel), said it had linked the teachers to the national Digital Sexual Crime Victim Support Center, announced an integrated support system through a hotline, and its section head said the office was sorry that early support had not been felt. The KTU Jeju branch (28 September) and the Jeju Teachers' Union (14 and 29 September) demand a victim-support system, per-teacher legal fees paid in advance and a dedicated support team. On 6 October 2026 Seogwipo Broadcasting reported, citing people in education and a tipster, that the education authority had finally rejected the victim teachers' application for lawyer fees for an additional criminal complaint, saying in a written opinion that with a police investigation already under way a further complaint could hardly stop or prevent the infringement of their teaching, so the support requirements were not met; critics contrast this with full legal-cost support in earlier sexual-offence cases.

Core concern High reported severity Criminal Charges

AI involvement reported · Causal attribution supported · 12 sources, 7 underlying accounts · Added 23/09/2026

12 Jun 2026RussiaChatGPT

Russia: a crypto investor lost about $2.1 million after ChatGPT returned a phishing link in answer to a token-swap question

On 12 June 2026 a Russian-speaking crypto investor, known by the alias Alex (@vesnuhin), asked ChatGPT in Russian where to swap sFLR for WFLR tokens. ChatGPT's reply included a link to sceptre.network, a phishing clone of the legitimate sceptre.fi. He connected his wallet and signed an unlimited-approval transaction; within seconds about 1.9 million FXRP, worth roughly $2.1 million (about 180 million rubles), were drained. A blockchain analyst traced the theft, and reported that the phishing link appeared only in Russian-language answers. Russia's Interior Ministry (MVD) later confirmed the loss.

Core concern High reported severity Investigation Opened

AI involvement supported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 17/09/2026

Cases may have several effects and sources. Mixed accounts qualify when they include a reported harm or adverse experience. People are counted within individual cases where sources support a number; we do not publish a collection-wide total of distinct people.

A source’s existence, the experience it reports and AI’s causal role are separate questions. A lawsuit records allegations unless a subsequent finding establishes them.

Methodology and corrections · Subscribe via RSS · Suggest a case or correction · Find support

Last dataset update: 23/10/2026. Dataset available under CC BY 4.0.