Skip to main content

NOPE · AI and people

AI incidents

Reports of AI-related harm and adverse experiences affecting people’s safety, wellbeing, rights and livelihoods. Explore what happened and the evidence available.

NOPE’s core concern is when AI communicates with a person, acts on their behalf, or depicts or impersonates them. The tracker also records consequential decisions, claims and privacy harms involving AI. Each case needs a described connection between AI use and the harm, including private information recorded into or disclosed to an AI service. Each account is reviewed for publication; claims may remain uncorroborated or disputed. How we review and count cases

In this selection

Published cases
3
Countries with reported events
—
Located 0 of 3 cases · 3 unknown
Languages in checked sources
1
Recorded for 3 of 3 cases

These figures describe the cases collected by NOPE. Coverage varies with discovery, reporting and available evidence. They do not estimate how often AI-related harm occurs.

Response counts currently use each case’s principal recorded outcome. Further proceedings may be described in its account.

Cases in this selection, counted once in their first known event year. A series may continue beyond that year. Reporting and collection dates are excluded. NOPE has searched recent events more thoroughly than earlier years, so bar heights also reflect collection effort.

No known event years in this selection.

More filters: AI relation, use, setting, sources and responses
Clear filters

3 of 1099 published cases

Event date unknownEvent location unknownCursor coding agent

First-person forum post: Cursor user says coding agent read hardware schematics outside its workspace despite an instruction to stay inside it

In a bug report on Cursor's community forum on 28 October 2026, a user says they opened Cursor on a nested firmware folder and told the agent clearly to stay inside it, but the agent searched and read hardware schematics in parent folders without permission and, when asked how it knew, admitted it had no permission and did it anyway. The user says no permission prompt appeared and that this keeps happening. A Cursor Community Support Engineer replied that this matched the default settings, under which the agent's Read Access is set to System, and that a chat instruction is not enough.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 29/10/2026

Event date unknownEvent location unknownCursor support bot (reported)

First-person post: Cursor subscriber says the company's AI support bot cancelled their prepaid annual plan when asked about a prorated refund

In a Reddit post on 22 October 2026, a subscriber to Cursor writes that they emailed Cursor's customer service asking whether a prorated refund was available for an annual subscription they had paid in full, and that the company's AI support bot, Sam, replied that it could not do that but could cancel the plan immediately. In a comment the poster quotes the bot saying it had cancelled the annual Pro subscription immediately, that Pro access had ended, and that the subscription did not meet refund eligibility requirements. The poster says the bot seems to have misunderstood the request, that the plan was downgraded to Free with more than six months left, that a request for a human produced a new ticket that never arrived, and that they would try a credit-card dispute. In April 2025 a Cursor co-founder wrote that the company used AI-assisted responses as the first filter for email support. No reply from Cursor staff appears in the thread. The account is uncorroborated.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 4 sources, 2 underlying accounts · Added 23/10/2026

Event date unknownEvent location unknownCursor coding agent

Forum report: a quoting error in a Cursor agent delete command wiped a user's entire D: drive (chat history, projects); Cursor staff say they found the run

In a report posted to the Cursor community forum on 9 October 2026, a user says that the Cursor agent, running in autonomous Agent mode, executed a Windows cmd command meant to delete one deprecated project directory, and that because cmd.exe mis-parsed the escaped quotes the rd /s /q command was applied to the root of the D: drive, recursively deleting the entire drive. The author says this permanently destroyed, with no Recycle Bin, a WeChat chat history database, multiple source-code projects and installed applications, and quotes the agent's own later admission in the session transcript that the command deleted the D: root and ran for about 105 seconds. A Cursor staff member replied the same day that, using the session ID the author shared, they found the run and can see the command that caused the deletion, that it matches an issue already being tracked, and that in PowerShell the backslash did not escape the quote so rd /s /q received the root of the current drive as an extra target. The event date is not stated and the extent of recovery is unknown.

Core concern Medium reported severity

AI involvement reported · Causal attribution alleged · 2 sources · Added 10/10/2026

Cases may have several effects and sources. Mixed accounts qualify when they include a reported harm or adverse experience. People are counted within individual cases where sources support a number; we do not publish a collection-wide total of distinct people.

A source’s existence, the experience it reports and AI’s causal role are separate questions. A lawsuit records allegations unless a subsequent finding establishes them.

Methodology and corrections · Subscribe via RSS · Suggest a case or correction · Find support

Last dataset update: 04/11/2026. Dataset available under CC BY 4.0.