Aug 2026Event location unknownUnidentified OpenAI generative AI service (reported)
A local-government employees' mutual aid association said in a notice dated 4 September 2026 that RIZAP, the company it contracts for specific health guidance, had reported that on 20 August 2026 it emerged that a RIZAP staff member, during data-extraction work, had entered data containing personal information into an external generative AI service that RIZAP did not permit. The association says 726 of its members across 14 branches are covered and lists the data as membership numbers, email addresses, names, dates of birth, sex, some addresses and phone numbers, the type of health guidance and, for members with them, high blood pressure, diabetes or dyslipidaemia. The IHI group health insurance society reported 210 of its members in a 2 September notice that, according to a security news site, names OpenAI as the provider, says the matter came to light through the employee's own report, and says OpenAI answered on 1 September that the data had not been used for model training. RIZAP's own release, as described in an ITmedia column, says the information was uploaded by mistake to a generative AI service the employee used privately, and that the company confirmed no possibility of viewing by third parties other than the service operator or of use in training. Whether the provider's staff could view the data was still being checked when the insurers published.
Contextual tracker case Medium reported severity
AI involvement reported · Causal attribution supported · 3 sources · Added 12/10/2026
23 Sept 2025 to 23 Oct 2025NetherlandsChatGPT (reported)
The municipality of Eindhoven in the Netherlands told its council in an information letter shared on Thursday 18 December 2025 that a sample of staff data traffic from 23 September to 23 October 2025 showed files containing personal data of residents and employees had been sent to public AI websites such as ChatGPT, according to Omroep Brabant and Binnenlands Bestuur. The files included youth-care (Jeugdwet) documents, internal reports and CVs, mostly from departments that provide care and support to residents. According to Omroep Brabant's account of findings by the advisory firm Hooghiemstra & Partners, the youth-care documents held information about the mental and physical health of minor children, and social-support (WMO) documents and applicants' CVs were also entered. The municipality reported the breach to the Dutch Data Protection Authority on 23 October, blocked public AI websites and asked OpenAI to delete the files. The council says the scale cannot be determined because the data was kept for only 30 days, so it cannot inform those affected, and that the risk of misuse is limited but cannot be ruled out. A spokesperson said OpenAI had not yet replied.
Contextual tracker case High reported severity
AI involvement reported · Causal attribution supported · 3 sources, 2 underlying accounts · Added 12/10/2026
29 Apr 2026Event location unknownChatGPT
Community First Health Plans, a nonprofit health plan in San Antonio, Texas, said in a 29 June 2026 release that on the evening of 29 April 2026 one of its employees uploaded a file containing personal information of some members to ChatGPT from a home computer network, circumventing the plan's firewall safeguards and violating its policy. The plan says it does not use ChatGPT and that its systems detected the violation and alerted its IT department. According to the release, the file may have included members' names, addresses, dates of birth, member identification numbers and prescription drug information. The next morning the plan revoked the employee's access, directed and verified deletion of the data from the employee's ChatGPT account, asked OpenAI to delete any related data, and ended its relationship with the employee. It notified affected members and federal and state agencies, offered 12 months of identity monitoring and says it is not aware of any misuse. The release gives no number of affected members.
Contextual tracker case Medium reported severity
AI involvement reported · Causal attribution supported · 1 source · Added 12/10/2026
2025FranceChatGPT (reported)
Plus que pro, a company founded in 2014 in Schiltigheim near Strasbourg that recruits franchised sales agents, is accused by three former employees interviewed by AFP of building a recruitment tool that screened candidates on unlawful criteria with the help of AI. According to one of them, in spring 2025 the company collected about 740,000 sales CVs from job platforms such as Hellowork and reduced them to 130,000 in five days with ChatGPT after applying discriminatory filters. AFP says it consulted the prompt, which told the AI to estimate each candidate's age, keep those under 55, infer age from the baccalaureate year and exclude those under 27, and require that the candidate's surname not be of African origin, and a results table listing a rejection reason against each name, such as "too young" or "too old", with women identified by first name marked "Exception". A former employee said that all the sales agents retained had the same profile, white and in their forties; another said the AI only systematised a practice already established when CVs were sorted by hand. One former employee says he has referred the matter to the CNIL and the Défenseur des droits; the CNIL said it could not comment on an individual case. The company denies ever asking anyone to build discriminatory criteria into its tools; it acknowledges that one version of the tool contained developments contrary to its specifications, but says that version was never put into service, evaluated no candidate and was developed by a former employee acting on their own initiative, who has since been dismissed. Rue89 Strasbourg separately reported, from working documents and testimony, that the company sorted thousands of CVs on criteria of gender and supposed origin without the candidates' knowledge between 2023 and 2026; its subscriber-only report could be read only in part.
Contextual tracker case Low reported severity Media Coverage
AI involvement reported · Causal attribution disputed · 3 sources, 2 underlying accounts · Added 11/10/2026
20 May 2026United StatesMeta internal AI systems (reported)
On 20 May 2026 Meta began notifying about 8,000 employees (roughly 10 percent of its workforce) that they had been selected for layoff. On 13 July 2026 twenty-six anonymous employees who had taken or requested medical, pregnancy, parental or family leave, or a disability accommodation, sued Meta in the US District Court for the Northern District of California. The complaint alleges, on information and belief, that Meta used internal AI-assisted systems (including the Metamate assistant, keystroke and activity monitoring, AI-token-usage dashboards and algorithmic performance ranking) to score, rank and select employees, and that these inputs could not accumulate during protected leave, so plaintiffs on leave were disproportionately selected. Meta says workforce decisions were made by people, not AI, and that no selection decision was made by AI. On 17 July 2026 the court denied a temporary restraining order, recording that the parties dispute whether Meta used AI in the terminations and finding serious questions on the merits but no shown likelihood of success. One plaintiff was voluntarily dismissed on 3 August 2026. The preliminary injunction motion was argued on 24 August 2026 and taken under submission. The plaintiffs are pursuing their merits claims in arbitration and the allegations are unproven.
Contextual tracker case Medium reported severity
AI involvement disputed · Causal attribution disputed · 10 sources, 5 underlying accounts · Added 29/09/2026
Mar 2025United StatesJewish Onliner (suspected)
In March 2025 Yale placed a Yale Law School scholar, who was deputy director of a Yale Law School project, on administrative leave and barred the scholar from campus. The New York Times reports the decision came three days after a news site described as powered at least in part by artificial intelligence published a story on the scholar's connections to Samidoun, a group on a US sanctions list. Inside Higher Ed and Middle East Eye identify the site as Jewish Onliner. The scholar's lawyer says Yale's general counsel named the article as the trigger of the investigation. The scholar told the Times of not being a member of any organization that would violate US law, and the lawyer says the scholar is not a member of Samidoun. A Yale Law School representative told The National that placing an employee on temporary administrative leave while a review is conducted is the appropriate process and that the scholar's short-term position was due to expire the following month. The site says humans fact-check and that AI tools play a significant role in its work. The inspected sources do not show that AI produced the article.
Contextual tracker case Medium reported severity
AI involvement suspected · Causal attribution alleged · 6 sources, 4 underlying accounts · Added 29/09/2026
Event date unknownEvent location unknownGemini note-taking in Google Meet
In a public post to r/LegalAdviceUK on 28 September 2026, an employee of a marketing agency in England writes that their boss pitched a prospective client and the client's business partner on a Google Meet call with Gemini note-taking switched on. After the boss said goodbye and left, the two business partners stayed on the call to discuss the proposal and the other agencies they were considering, and Gemini kept taking notes. The boss then sent the employee the notes and transcript, which named a competing agency and included 'personal details of who they spoke to specifically on the call', and asked for a follow-up deck built on what the partners liked and disliked. The poster believes the partners did not know they were still being transcribed. Google's help page says Meet tells all participants when notes are being taken; whether the partners noticed is not known. The account is uncorroborated.
Contextual tracker case Low reported severity
AI involvement reported · Causal attribution alleged · 4 sources, 2 underlying accounts · Added 29/09/2026
1 Aug 2024 to 1 Oct 2024United StatesFACES facial recognition
In August 2024, Robert Dillon, a 52-year-old self-employed commercial crabber from the Fort Myers area, was arrested at his San Carlos Park home on a third-degree felony warrant for the attempted luring of a child at a Jacksonville Beach McDonald's in November 2023 — a crime he had no part in. The warrant rested on a 93%-confidence result from FACES, the Face Analysis Comparison and Examination System maintained by the Pinellas County Sheriff's Office, run against low-resolution cell-phone photos of a surveillance screen, plus a restaurant employee's photo-lineup identification. Dillon spent a night in jail and bonded out against his truck's title; prosecutors dropped the charges in October 2024 after work-alibi evidence, but it took about a year to expunge the arrest and remove his mugshot. In June 2026 the ACLU filed a federal lawsuit (M.D. Fla.) against Jacksonville Beach, the Jacksonville sheriff and the Pinellas County Sheriff's Office, calling Dillon one of at least 14 known wrongful arrests from police reliance on facial recognition since 2019.
Contextual tracker case Medium reported severity Lawsuit Filed
AI involvement supported · Causal attribution supported · 3 sources · Added 15/09/2026