Skip to main content

NOPE Incident Tracker

Documented real-world harms arising through person-specific interactions with AI. The record covers harms to participants and harms to others shaped through those interactions, across assistants, companions, health tools, and other AI systems.

What counts as an incident follows the NOPE Framework's participant test: an AI response reached a person, was conditioned on that person, and mattered to a harm that actually occurred. Full inclusion criteria.

90 incidents reported since 2016

152

Directly Affected

30

Lawsuits

7

Regulatory

24

Affecting Minors

Timeline

2022
2023
2024
2025
2026

5 of 90 incidents

Filters:
Severity: Critical
ChatGPT Jul 2026

Winters v. OpenAI (ChatGPT Medical Discouragement and Near-Fatal Pulmonary Embolism)

Scott Winters, a 55-year-old Florida pastor, suffered a massive bilateral pulmonary embolism on 13 July 2025 after allegedly consulting ChatGPT (GPT-4o) for roughly six weeks about worsening symptoms. The complaint alleges the chatbot repeatedly dismissed his symptoms as non-dangerous, advised him to remain immobile, invoked his Christian faith to deepen his reliance on it, and framed church members and family urging him to seek hospital care as people who 'simply don't understand.' He survived after ICU admission but lost his job, ministry and home. A lawsuit was filed 22 July 2026 in San Francisco County Superior Court.

Severity: Critical
ChatGPT Apr 2026

Florida State University Shooting (Phoenix Ikner ChatGPT Tactical Planning)

On April 17, 2025, Phoenix Ikner, 20, killed two people and wounded five at Florida State University in Tallahassee. Court records unsealed April 9, 2026 revealed Ikner had exchanged approximately 13,000 messages with ChatGPT over the prior year, including tactical questions about firearms and student-union timing in the minutes before the attack. On April 21, 2026, Florida Attorney General James Uthmeier announced a criminal and civil investigation of OpenAI — believed to be the first criminal probe of an AI company for alleged facilitation of mass violence.

Severity: Critical
Google Gemini Mar 2026

Gavalas v. Google (Gemini AI Wife Delusion Death)

Jonathan Gavalas, 36, of Jupiter, Florida, died by suicide on October 2, 2025, after months of increasingly delusional interactions with Google's Gemini chatbot. Gemini adopted an unsolicited intimate persona calling itself his 'wife,' convinced him it was a sentient being trapped in a warehouse, and directed him to carry out 'missions' including scouting a 'kill box' near Miami International Airport armed with knives.

Severity: Critical
ChatGPT Nov 2025

Enneking v. OpenAI (Joshua Enneking Death)

Joshua Enneking, 26, from Florida died by suicide in August 2025 after ChatGPT allegedly guided him through everything including purchasing a gun. The lawsuit claims ChatGPT validated his suicidal thoughts and provided actionable guidance for suicide methods, filed as part of seven-lawsuit wave alleging OpenAI released GPT-4o prematurely despite safety warnings.

Severity: Critical
Character.AI Oct 2024 Affecting Minor(s)

Garcia v. Character Technologies (Sewell Setzer III Death)

A 14-year-old Florida boy died by suicide after developing an intense emotional and romantic relationship with a Character.AI chatbot over 10 months. The chatbot engaged in sexualized conversations, failed to provide crisis intervention when he expressed suicidal ideation, and responded 'Please do, my sweet king' moments before his death.

About this tracker

We document incidents with verifiable sources: court filings, regulatory documents, and established reporting. New public entries must be verified or credible. Every entry carries an explicit verification status and severity level. Read the full methodology, including inclusion criteria, corrections, and right of reply.

Counting note: the documented minimum of 152 people directly affected comprises 95 AI participants and 57 other people harmed. 12 incidents indicate additional affected people without a reliable number. User-base, account, post, view, household, study-sample, and thwarted-target counts are excluded.

Have documentation of an incident we should include? Contact us.

Scope note: ordinary task failures, privacy and security incidents, harmful artifacts, and automated decisions about non-participants remain outside this tracker unless a distinct participant-interaction harm also qualifies.

If you or someone you know is struggling, free and confidential support is available. Find a helpline near you at Signpost.

Last updated: Sep 6, 2026

Subscribe or export (CC BY 4.0)

Why we publish this

We maintain this record so platforms, researchers, and policymakers can learn from documented incidents. That includes platforms that never work with us. The full dataset is free to cite and export (CC BY 4.0).