13 Aug 2026 to 8 Sept 2026United StatesSentinel AI (reported)
NorthJersey.com reported on 5 October 2026 that a former remote employee of Sutherland Healthcare Solutions, based in Clifton, New Jersey, sued the company in New Jersey Superior Court in Atlantic City on 23 September 2026. According to the complaint as reported, the employer told the employee it would start monitoring her through her work laptop's webcam with software called Sentinel AI, which would use AI and facial recognition to confirm that she was the person at the desk, taking 160 still images in an eight-hour shift. The employee raised concerns in writing about the AI seeing inside her home and about whether the data would be securely stored, said the monitoring had increased her anxiety and stress and worsened a medical condition, and asked for a full or partial exemption as a reasonable accommodation. The suit says the request was denied, she was given a 24-hour ultimatum on 13 August 2026 to submit to the monitoring or resign, an offer to avoid the software by commuting to the office was rejected because it would require six hours of travel time, and her employment was terminated on 8 September 2026. The suit alleges that the employer violated New Jersey's anti-discrimination laws and retaliated against her for requesting reasonable accommodations. Sutherland did not respond to the outlet's requests for comment, and the allegations have not been tested in court.
AI relation unknown Medium reported severity Lawsuit Filed
AI involvement reported · Causal attribution alleged · 1 source · Added 06/10/2026
25 Apr 2026SingaporeUnidentified code-generation tool
On 25 April 2026 Bee Cheng Hiang, the Singapore bak kwa and food products company, sent a marketing email in batches of 1,000 with every recipient's address visible in the To field, so each affected member's email address was disclosed to up to 999 other recipients. Mothership, reporting the findings of the Personal Data Protection Commission (PDPC), puts the number of affected members at 95,364 (The Straits Times says more than 95,000), and the PDPC says email addresses were the only personal data involved. According to the PDPC, an employee had written the email distribution script with a generative AI tool and the prompt did not ask for recipients to be hidden from one another. Mothership reports that a missing bracket in the generated code grouped each batch into one To field. The PDPC says the AI tool did not malfunction and attributes the breach to human error in developing the code with an AI tool. It says the incident likely happened because the company did not test the script sufficiently, had no supervisory review of the employee's work and had no policy on staff use of generative AI. It reports no evidence of further misuse. The company notified the PDPC on 27 April, notified affected members, and gave a voluntary undertaking that the PDPC accepted on 2 September. The PDPC told The Straits Times it was the first AI-related data breach reported to it.
AI relation unknown Low reported severity Regulatory Action
AI involvement supported · Causal attribution supported · 3 sources, 1 underlying account · Added 02/10/2026
16 Apr 2026KenyaMeta AI (reported)
On 16 April 2026 Sama, an outsourcing company with operations in Nairobi that did AI data-annotation work for Meta, announced that Meta had given formal notice ending its contract and that a redundancy process would affect more than 1,000 employees. Sama put the figure at 1,108 workers, and the Oversight Lab said the workers had six days' notice. The decision came less than two months after the SvD and GP investigation in which Sama annotators said they had seen intimate footage from users of Meta's AI glasses. Meta said it paused its work with Sama the month before while it looked into those claims and then decided to end the work because Sama does not meet its standards. Sama says it was never notified of any failure to meet those standards. A Kenyan workers' organisation alleges Meta's decision was caused by staff speaking out, which Meta had not addressed when the BBC reported it on 30 April 2026. Employees told SvD that Sama tightened security and tried to identify who had spoken to journalists, which Sama denies. The workers are described by role and are not named.
AI relation unknown Medium reported severity
AI involvement disputed · Causal attribution disputed · 5 sources, 4 underlying accounts · Added 29/09/2026
1 Apr 2026 to 22 Jun 2026United StatesMeta Model Capability Initiative
From April 2026 Meta installed its Model Capability Initiative (MCI) on US employees' work computers, recording mouse movements, clicks, keystrokes and screen content on designated apps and sites so that its AI agents could learn how people use software. Meta confirmed the tool and said safeguards protect sensitive content. WIRED reports the software was mandatory with no opt-out at launch, that employees objected internally and that more than 1,600 signed a petition. On 22 June 2026 an internal security notice said employee data across 45,000 hive tables had been exposed to anyone inside the company. Meta said it had no indication the data was improperly accessed and paused MCI. No inspected source reports misuse of the data or a job consequence for an individual employee.
AI relation unknown Low reported severity
AI involvement reported · Causal attribution unclear · 7 sources, 4 underlying accounts · Added 29/09/2026