NOPE · AI and people

AI incidents

Name: AI incidents
Creator: NOPE
License: https://creativecommons.org/licenses/by/4.0/

Reports of AI-related harm and adverse experiences affecting people’s safety, wellbeing, rights and livelihoods. Explore what happened and the evidence available.

NOPE’s core concern is when AI communicates with a person, acts on their behalf, or depicts or impersonates them. The tracker also records consequential decisions, claims and privacy harms involving AI. Each case needs a described connection between AI use and the harm, including private information recorded into or disclosed to an AI service. Each account is reviewed for publication; claims may remain uncorroborated or disputed. How we review and count cases

Explore incidents Our scope and evidence

In this selection

Published cases: 1
Countries with reported events: 1; Located 1 of 1 cases · 0 unknown
Languages in checked sources: 1; Recorded for 1 of 1 cases

0Core concern
AI communicated, acted for, depicted or impersonated 1Contextual cases
AI made a decision or claim about someone

These figures describe the cases collected by NOPE. Coverage varies with discovery, reporting and available evidence. They do not estimate how often AI-related harm occurs.

0cases with a recorded lawsuit outcome 0cases with a recorded regulatory response 0cases involving minors

Response counts currently use each case’s principal recorded outcome. Further proceedings may be described in its account.

When events happened

1 case without a known event year

Cases in this selection, counted once in their first known event year. A series may continue beyond that year. Reporting and collection dates are excluded. NOPE has searched recent events more thoroughly than earlier years, so bar heights also reflect collection effort.

No known event years in this selection.

Search cases Consequence Event country

More filters: AI relation, use, setting, sources and responses

AI-to-person relation Setting Whose AI use Source type inspected AI system Reported severity Response / population Legacy evidence assessment

Event year Sort by Clear filters

1 of 1050 published cases

Export JSON Export CSV

Event date unknownEstoniaUnidentified AI web service

Estonia's data protection inspectorate says a bank employee uploaded staff employment contracts to an AI service whose shared account let colleagues view them

In its overview of personal-data breach notifications for the third quarter of 2026, published on 8 October 2026, Estonia's Data Protection Inspectorate (AKI) listed a case in which a bank employee uploaded employment contracts to a widely used AI web service, making them available to other employees who used the same AI account. Answering questions from the technology outlet Geenius, AKI said the employment contracts of a few individual employees had been entered into the AI system and became accessible to other employees using the same account; Geenius reports that those colleagues could view and download them. According to the report, the bank informed the people affected and blocked its employees from using that AI system. AKI did not name the bank, the AI service or further circumstances.

Contextual tracker case Low reported severity Internal Action

AI involvement supported · Causal attribution supported · 2 sources, 1 underlying account · Added 31/10/2026

Cases may have several effects and sources. Mixed accounts qualify when they include a reported harm or adverse experience. People are counted within individual cases where sources support a number; we do not publish a collection-wide total of distinct people.

A source’s existence, the experience it reports and AI’s causal role are separate questions. A lawsuit records allegations unless a subsequent finding establishes them.

Methodology and corrections · Subscribe via RSS · Suggest a case or correction · Find support

Last dataset update: 31/10/2026. Dataset available under CC BY 4.0.