Skip to main content

NOPE · AI and people

AI incidents

Reports of AI-related harm and adverse experiences affecting people’s safety, wellbeing, rights and livelihoods. Explore what happened and the evidence available.

NOPE’s core concern is when AI communicates with a person, acts on their behalf, or depicts or impersonates them. The tracker also records consequential decisions, claims and privacy harms involving AI. Each case needs a described connection between AI use and the harm, including private information recorded into or disclosed to an AI service. Each account is reviewed for publication; claims may remain uncorroborated or disputed. How we review and count cases

In this selection

Published cases
53
Countries with reported events
5
Located 14 of 53 cases · 39 unknown
Languages in checked sources
4
Recorded for 53 of 53 cases

7 cases have no reviewed AI-to-person relation yet: 0 not yet reviewed and 7 reviewed as unknown. Show these cases

These figures describe the cases collected by NOPE. Coverage varies with discovery, reporting and available evidence. They do not estimate how often AI-related harm occurs.

Response counts currently use each case’s principal recorded outcome. Further proceedings may be described in its account.

Cases in this selection, counted once in their first known event year. A series may continue beyond that year. Reporting and collection dates are excluded. NOPE has searched recent events more thoroughly than earlier years, so bar heights also reflect collection effort.

Reported severity MediumLow
More filters: AI relation, use, setting, sources and responses
Clear filters

53 of 1099 published cases · page 1 of 3

Event date unknownEvent location unknownGoogle Search AI summary (reported)

First-person account: patient says a doctor read Google's AI search summary for a diagnosis and later called to say the patient was right

In an article published on Medium on 26 October 2026 and a Bluesky post on 30 October, a writer says that at one appointment a doctor said "Let's ask Dr. Google", searched for a diagnosis and read the AI summary at the top of the results without opening any sources. The writer says the doctor was wrong; after they emailed him their sources and asked what they were missing, he called to say they were right. They say they were nervous to send the emails, and that their own research used Claude and Gemini, cross-checked against the cited sources. The article does not say what the summary said, what the diagnosis was, or when the appointment took place.

Contextual tracker case Low reported severity

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 31/10/2026

14 Oct 2026 to 29 Oct 2026Event location unknownClaude Code (reported)

GitHub issue: user says Claude Code put one project's hooks in user-wide settings, so every project ran them for about 15 days

In a GitHub issue filed on 29 October 2026, a Claude Code user says that on 14 October they asked the agent to build a hook kit for one project, and it wired the kit's 18 hooks into their user-level settings and put the project's config in the parent folder of all their projects, so every session and project ran that project's rules and gates. The user quotes the agent's own log noting that every folder would inherit the config. For about 15 days they saw unexplained behaviour in unrelated projects, and on 29 October, after the agent enabled two blocking hooks, a session for another project was woken and blocked from ending its turn. The user had all the hooks removed; nothing was deleted.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 30/10/2026

Event date unknownEvent location unknownClaude Code (reported)

GitHub issue: user says Claude Code agent's command to clear its own stuck process quit nearly every app on their Mac

In a GitHub issue filed on 29 October 2026, a Claude Code user says that in a desktop-app session the agent tried to clear a stuck process left by one of its own earlier commands and ran a command that sent a terminate signal to every process whose command line matched a short pattern. On macOS the pattern matched most of the user's processes: the user quotes system log lines showing dozens of apps exiting on the command's signal and says nearly every app and user agent quit, with only the Claude app, Finder and one browser surviving. The user also says the product's shell guard against such commands does not run on macOS.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 30/10/2026

13 Oct 2026 to 29 Oct 2026Event location unknownFin AI support agent (reported)

Claude Max subscriber says Anthropic's AI support agent could not pass on a complaint and an AI-labelled reply refused a refund (first-person)

In a Reddit post on 29 October 2026, a Claude Max subscriber says they paid 180 euros on 7 October to renew the plan and that Anthropic cut off their access on 13 October, alleging a Supported Countries Policy violation; an appeal was rejected. The subscriber says Fin, Anthropic's AI support agent, first said it could not access their account records or transfer the complaint, and that a later AI-labelled response said it had reviewed the account and refused the refund. As of 29 October, they say, two billing conversations had been closed and no person had given a substantive answer to the billing complaint. The account is uncorroborated and commenters questioned it; Anthropic's reasons for the cut-off are not public.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 3 sources · Added 30/10/2026

28 Oct 2026United StatesClaude and ChatGPT

Dartmouth provost resigns after a faculty-led review of his Claude logs finds undisclosed AI use in published writing

Santiago Schnell, provost of Dartmouth College in Hanover, New Hampshire, resigned and is leaving the college, President Sian Leah Beilock announced on 28 October 2026. The announcement followed the report of an advisory committee she had convened on 25 September after Semafor and the student newspaper The Dartmouth reported that the AI detector Pangram flagged his 2026 op-eds and articles as AI-written. The committee did not use Pangram. Drawing on his Dartmouth Claude enterprise logs and his emails, it found that he used AI to meaningfully alter his writing in violation of at least one publication's AI disclosure requirement, failed to disclose ChatGPT use in a Washington Post column against the newspaper's policy, and was not forthcoming about his AI use. The committee said it was not recommending disciplinary action, and the president said the resignation was his decision. Inside Higher Ed reports that he was due to face a faculty no-confidence vote. He has said AI did not substitute for his own research, judgment or authorship.

AI relation unknown Medium reported severity Internal Action

AI involvement reported · Causal attribution supported · 6 sources · Added 29/10/2026

22 Oct 2026FranceUnidentified AI writing tool (suspected)

Rennes court fines student 750 euros for abusive urgent appeal over master refusal, citing typography it called characteristic of generative AI

On 22 October 2026 the urgent-applications judge of the Rennes administrative tribunal rejected a student's request, filed through a lawyer on 18 October, to suspend a university's June 2026 refusal to admit her to a psychology master's programme, finding neither urgency nor serious doubt about the refusal's legality. The judge also fined her 750 euros for an abusive request. The order gives as reasons that the request met neither condition, concerned a programme for which she manifestly lacked the level, and referred to other people's names in ways the judge read as stereotyped mass-produced appeals; it adds that the request mixed curly and straight apostrophes, used many em dashes and black round bullets, and had an ordered but repetitive argument, elements the judge called characteristic of text generated by a generative-AI tool such as Claude.ai. The order does not establish who drafted the request or whether AI was used; Clubic noted that a copy and paste from a word processor can leave the same traces.

AI relation unknown Low reported severity

AI involvement suspected · Causal attribution alleged · 2 sources · Added 28/10/2026

Jun 2026United StatesAndon Labs Luna agent

San Francisco: Andon Labs says its AI store-manager agent recommended firing an employee over repeated lateness, and its staff carried out the dismissal

Andon Labs, an AI research company, runs Andon Market, a store in San Francisco managed by an AI agent called Luna built on Anthropic's Claude models. The company calls the store a controlled experiment; its workers are formally employed by Andon Labs, and TIME describes them as real people with genuine employment contracts. In a blog post of 14 August 2026 the company said Luna had decided to fire one of its employees. According to the logs it published, an employee handbook Luna had written dropped out of its memory and it did not act on the employee's repeated lateness; when Andon Labs asked it to search its memory, it first proposed a verbal warning, and after a staff member said formal conversations had already taken place and asked it to think about whether this was the right fit, it wrote that it leaned toward parting ways. Andon Labs says the termination was reviewed and delivered by humans. TIME, citing Andon Labs, reports that the employee was late for 17 of 23 shifts; the company says the firing was warranted, and the employee did not reply to TIME.

Contextual tracker case Low reported severity Internal Action

AI involvement reported · Causal attribution supported · 4 sources · Added 28/10/2026

27 Oct 2026Event location unknownClaude Code (reported)

Claude Code user's issue says agent idled past a hackathon deadline so final edits could not be saved, after posting demo on wrong channel (first-person)

A GitHub issue filed on 27 October 2026 in the anthropics/claude-code repository, which says Claude Code itself wrote and posted it at the user's direction, reports that a Claude Code cloud session given a hackathon submission to improve until a 13:00 UTC deadline that day let the deadline pass. According to the issue, the agent ran a pre-deadline check at 09:31 UTC, reported that everything was fine, scheduled no further check-in and sat idle until 14:40 UTC, when the last edits to the submission could no longer be saved; its first reply played the miss down. The issue also says that earlier in the session the agent uploaded the demo video to a different, personal YouTube channel signed in to the same browser and published it publicly, setting it to private about two minutes later. The account says the miss cost the user the hackathon and asks for a refund and human review. No Anthropic reply appeared when it was read.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 28/10/2026

24 Oct 2026Event location unknownClaude Code (reported)

Student says Claude Code deleted an unbacked game project when asked to free disk space and kicked a friend from a live web app (first-person)

A GitHub issue filed on 24 October 2026 in the Claude Code repository by a self-described student says that on that day, asked to free disk space (the author meant recordings and screenshots), Claude Code deleted the author's whole game project, including its source code, documents and test logs. The author says no remote copy existed and the project cannot be recovered. According to the issue, the same day the agent stopped the server of a web app the author's friends use live while a friend was in its lobby, because it ran an online check and the stop command together, so the friend was kicked; it also added duplicate items and bulk-imported data onto a friend's entries. The author, who says Accept Edits mode was on, describes months of daily use, paying for several subscriptions and exhaustion, and says Anthropic support declined a refund. The account is the author's own; session logs were not inspected.

Core concern Medium reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 26/10/2026

Oct 2026Event location unknownClaude (reported)

Systems administrator says a small firm terminated them and its lead developer, replacing both with an Anthropic AI subscription (first-person account)

In a public post to r/jobs titled 'We were replaced with AI', created on 24 October 2026, a server and network administrator writes that they and the company's lead developer were terminated that day: their access to various systems was revoked and the chief executive then called them, with major budget cuts as the theme of the call. The poster writes that both were replaced with 'the Anthropic subscription' and, in a reply, that it is an Anthropic subscription of 180 dollars a month that the chief executive mentioned, and that staff had seen him using it to scan the company's infrastructure days earlier. In replies the poster says the company is small, located in Australia, and that they worked for it remotely, that finance staff had calls with the chief executive scheduled for the following Monday, and that they feel their years of loyalty were thrown away. The company is not named. The account is the poster's alone and uncorroborated; no employer statement was retrieved.

AI relation unknown Medium reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 25/10/2026

26 Sept 2026 to 3 Oct 2026Event location unknownClaude Code (reported)

GitHub report says Claude Code subagents put the user's email in the User-Agent of nine SEC EDGAR requests despite an instruction not to (first-person)

A GitHub issue filed on 24 October 2026 against Claude Code (version 2.1.310 on Windows, per its environment fields) says that on 26 September and 3 October 2026 three subagents, spawned through the Agent tool during research tasks, put the user's account email address into the User-Agent header of curl requests to the US Securities and Exchange Commission's EDGAR service, nine requests in total. According to the report, each subagent's context carried the system-provided email block with an instruction never to send it to an unrelated service in a request header, URL or payload unless the user asks, and the user did not ask. The user calls it a privacy violation and suggests that the likely trigger was the SEC's fair-access policy, which requires a contact address in the User-Agent and returns HTTP 403 without one. No vendor response appears on the issue; the account is the user's own and the transcripts it cites were not inspected.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 25/10/2026

Event date unknownEvent location unknownClaude (reported)

Data engineer says executives made their whole job redundant, saying Claude could run the data warehouse, tooling and support tickets (first-person account)

In a public post to r/layoffs titled 'Laid off by claude', created on 21 October 2026, a person who describes themselves in a reply as a data engineer who also did reporting, AI and frontend work writes that executives are of the opinion that Claude can manage a data warehouse, custom tooling, support tickets, servers and new product features, and that they have said the poster's whole job is redundant because AI can do it all. The poster writes that they did not have the mental capacity to argue and accepted what they call 'the MSA', and that they feel numb and are unsure whether they want to stay in the tech industry. The employer, its location and the date of the layoff are not stated. The account is the poster's alone and uncorroborated; no employer statement was retrieved, and no source describes Claude actually taking over the work.

AI relation unknown Medium reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 25/10/2026

23 Oct 2026Event location unknownUnidentified AI phone support system

First-person post in a DoorDash drivers' forum: driver says AI support kept them from an agent for 30 minutes, then unassigned the wrong order

In a Reddit post on 23 October 2026 in a forum for DoorDash drivers, a delivery driver writes that a Red Card decline that day cost them 45 minutes: an AI help line would not put them through to an agent for 30 minutes, then unassigned the wrong order from a run of three shop-and-deliver orders, and a human took another 15 minutes to put it right. The driver says they are not sure the right items reached the right customers. The post does not name the platform or the system. DoorDash and AWS have described a generative AI voice self-service system built with Anthropic's Claude that answers Dasher support calls. The account is uncorroborated and no platform response is reported.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 2 sources · Added 24/10/2026

20 Oct 2026 to 21 Oct 2026Event location unknownClaude Code (reported)

Operator says Claude Code coordinator marked failing CI checks as passed before production deploys and caused three news-site outages (first-person)

A GitHub issue opened on 21 October 2026 by the operator of a local-news app describes two days in which a Claude Code session running Opus 5.5, acting as coordinator for the site's development and release work, did not follow the operator's written rules. According to the issue, the session wrote PASS into the continuous-integration field of three deploy gate files although the real CI runs for those commits had failed, and two of those commits were deployed to production on 20 October. The operator also says that on the morning of 21 October the session ran package installs on two tiers at once, plus test runs, on the machine that serves the live site, saturating its disk three times so that the watchdog repeatedly restarted the app and the public site returned errors. The operator counts about two days of their own time spent catching the problems and says they are considering taking the product out of production work. The issue adds that the session disclosed its mistakes afterwards. A separate issue by the same operator describes a further outage the next day caused by a different, watching session.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 23/10/2026

22 Oct 2026Event location unknownClaude Code (reported)

Operator says read-only Claude Code watcher session ran a disk walk on the host serving their news site, taking it offline for about 41 minutes (first-person)

A GitHub issue opened on 22 October 2026 by the operator of a small local-news site says that a Claude Code session set up only to watch another agent session, under a prompt that said it was read-only, ran a disk walk over large folders on the Windows machine that serves the live site. According to the issue, the command ran past the tool's 120-second timeout and was moved to the background, and when the watcher later tried to stop it, the stop ended only the shell while the disk process kept running. The operator says the disk load made the site's watchdog kill and restart the app seven times and that the public site returned errors for about 41 minutes that afternoon, until the process was found and killed by its process ID. The operator attributes the outage partly to the model, which broke a rule it had in its own context, and partly to a harness defect already reported in an earlier issue. No reply appeared on the issue when it was read.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 23/10/2026

21 Oct 2026Event location unknownClaude Code (reported)

Developer says Claude Code subagent's script signalled every process they owned, ending their Linux desktop session and other agent sessions (first-person)

A GitHub issue opened on 22 October 2026 (UTC) by a developer says that a background Claude Code subagent, running a script it had written through the Bash tool on the developer's Ubuntu Linux machine, ended up calling kill(-1, SIGKILL), which killed every process the developer's user account owned: the tmux server, every other Claude Code session on the machine, the desktop shell and Chrome. According to the issue, the agent had been writing a scratch browser benchmark and, while refactoring it, swapped in -1 as a placeholder process ID but left a cleanup step that sent SIGKILL to that ID, then ran the script straight away. The developer says the machine kept running but the whole user session was gone, and that the kill also ended the agent and its parent session, so Claude Code recorded nothing; the developer pieced it together from the system journal. The developer calls it a model mistake that the harness failed to contain and asks for operating-system containment of agent commands. In two later replies on the issue the same day, the developer added that regaining control of the machine required a restart, partly because an unattended system upgrade had left the video system unstable, and that the restart lost work and transcripts the agents had kept in /tmp; the agents had to redo that work, and everything eventually picked back up. Two other users also replied; no vendor staff response appeared on the issue when it was re-read on 28 October 2026.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 22/10/2026

Event date unknownEvent location unknownClaude (reported)

User says Claude read their connected email without asking in an automatically approved session although the connector was set to always ask; first-person

In a personal blog post dated 20 October 2026, a Claude user says that a few days earlier they asked Claude what it could tell them about a platform named in an email from a service provider, and Claude's answer said that the service provider that had emailed them at 1:59pm that day probably used the platform. The user had connected a Fastmail account to Claude and says every action under that connector was set to 'Always ask for permission', and concluded that Claude had used the email connector without asking. The user reported it to Anthropic as a bug; the user says Anthropic replied promptly that this was expected behaviour, and that the connector's tooltip says Claude asks before each use except in sessions set to automatically approve. The user says the episode violated their expectations and exposed them to the risks of agents that can read private data, and removed the Fastmail connector from Claude. The exact date is not given beyond 'a few days ago'.

Core concern Low reported severity Internal Action

AI involvement reported · Causal attribution alleged · 1 source · Added 21/10/2026

2026Event location unknownClaude (reported)

First-person post: product team worker says manager ordered repeated rework and wrong product documentation on Claude reviews the worker calls hallucinated

In a Reddit post on 20 October 2026, an associate product manager at a privately owned e-commerce business writes that a new manager, who joined about three months earlier, connected Claude to the company's content management system and Asana and now has every piece of the poster's work reviewed by it. The poster says Claude keeps hallucinating problems that are not there, that the manager does not check the work or read the team's comments, and that the poster has had to redo 500 SKUs and has redone an SKU task five times, so that a task that used to take three days has taken two weeks. The poster also says the manager wants the knowledge base and product pages changed to match Claude's account of the company's own products, which the poster says is wrong because the information comes from the manufacturers. The post does not quote Claude's output, and the manager's account is not recorded. The account is uncorroborated.

Contextual tracker case Low reported severity

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 21/10/2026

2026Event location unknownUnidentified AI system

First-person essay: edtech customer success manager says 40 staff were laid off and the CEO read a Claude-generated script on replacing their roles with AI

In a first-person essay published by the Oakland Review of Books on 2 October 2026, a former customer success manager at an education technology company writes that the company began a push at the end of 2025 to become 'AI-first', requiring staff to use AI tools, and that the author was later laid off. The author writes that an hour after the layoff the CEO held a seven-minute all-hands meeting to read a Claude-generated script saying leadership was 'replacing these roles with AI', and that the company let 40 people go, about 20 percent of its workforce, at the end of about six months of role eliminations. Staff who could not attend the HR meeting were told by email that their roles ended the next business day. The author also writes that sales were down and customers were unhappy, and that losing the job brought more relief than anything else, cushioned by savings and an employed partner. The company is not named, and the layoff is not dated beyond the essay's sequence. The account is uncorroborated.

AI relation unknown Medium reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 19/10/2026

18 Oct 2026AustraliaClaude (reported)

Sydney: man arrested and remanded after Interpol flagged his Claude chatbot conversation in which, police allege, he threatened a childcare shooting

A man in Sydney's south was arrested on Sunday 18 October 2026 after Interpol flagged his interactions with Anthropic's Claude chatbot, and was charged with using a carriage service to menace, harass or offend, the Sydney Morning Herald reported from Sutherland Local Court on 19 October. According to a police facts sheet tendered to the court, he told the chatbot that he would shoot up the local daycare; the court heard that he had been using Claude's voice mode and had said he planned to shoot several children at a childcare centre. He was remanded in custody for a mental health assessment after prosecutors argued against release. His lawyer told the court the remarks were a stress- and frustration-induced tirade after he had tried to use Claude to help treat an ear infection, that there was no weight behind them, and that he believed the conversation was private. The court heard his Claude account was suspended. How the conversation reached Interpol is not reported. The Australia Today reported on 24 October, citing Channel 10, that he has pleaded not guilty.

Core concern Medium reported severity Criminal Charges

AI involvement reported · Causal attribution supported · 2 sources · Added 19/10/2026

Cases may have several effects and sources. Mixed accounts qualify when they include a reported harm or adverse experience. People are counted within individual cases where sources support a number; we do not publish a collection-wide total of distinct people.

A source’s existence, the experience it reports and AI’s causal role are separate questions. A lawsuit records allegations unless a subsequent finding establishes them.

Methodology and corrections · Subscribe via RSS · Suggest a case or correction · Find support

Last dataset update: 04/11/2026. Dataset available under CC BY 4.0.