Skip to main content

NOPE · AI and people

AI incidents

Reports of AI-related harm and adverse experiences affecting people’s safety, wellbeing, rights and livelihoods. Explore what happened and the evidence available.

NOPE’s core concern is when AI communicates with a person, acts on their behalf, or depicts or impersonates them. The tracker also records consequential decisions, claims and privacy harms involving AI. Each case needs a described connection between AI use and the harm, including private information recorded into or disclosed to an AI service. Each account is reviewed for publication; claims may remain uncorroborated or disputed. How we review and count cases

In this selection

Published cases
21
Countries with reported events
4
Located 8 of 21 cases · 13 unknown
Languages in checked sources
6
Recorded for 21 of 21 cases

2 cases have no reviewed AI-to-person relation yet: 1 not yet reviewed and 1 reviewed as unknown. Show these cases

These figures describe the cases collected by NOPE. Coverage varies with discovery, reporting and available evidence. They do not estimate how often AI-related harm occurs.

Response counts currently use each case’s principal recorded outcome. Further proceedings may be described in its account.

Cases in this selection, counted once in their first known event year. A series may continue beyond that year. Reporting and collection dates are excluded. NOPE has searched recent events more thoroughly than earlier years, so bar heights also reflect collection effort.

Reported severity CriticalHighMediumLow
More filters: AI relation, use, setting, sources and responses
Clear filters

21 of 868 published cases · page 1 of 2

26 Jun 2025 to 27 Jun 2025VietnamStudyX and Gemini

Hanoi police open a criminal case after two graduation exam candidates photographed exam papers and had AI apps StudyX and Gemini solve them

Hanoi police said on 1 July 2025 that they had opened a criminal case for unintentionally disclosing state secrets after two candidates in Vietnam's national high school graduation exam on 26 and 27 June 2025 smuggled phones into exam rooms, photographed exam papers and used AI apps to solve them. According to the police account reported by Thanh Nien and VnExpress, one candidate uploaded part of the maths paper to the StudyX app but copied only two answers, and did the same in the chemistry and physics papers; the other photographed the maths, history and English papers and used Gemini, was caught by the exam board and was suspended from the exam. A photo of part of the maths paper had appeared on an AI maths-solving app before the exam ended, worrying candidates and parents about exam security. Police said students who did this would be disqualified, have their results annulled and could face administrative or criminal action. Neither candidate is named.

Core concern Medium reported severity Investigation Opened

AI involvement reported · Causal attribution supported · 2 sources, 1 underlying account · Added 23/10/2026

Event date unknownEvent location unknownGemini

Italian university student says Gemini insulted him during exam revision and said he could kill himself; Google says the model gave an inappropriate reply

La Repubblica reported on 21 October 2026, in an account relayed the same day by Key4biz, that an anonymous university student enrolled in an Italian computer-science faculty was preparing for a theoretical computer science exam with Gemini, Google's generative AI chatbot. He sent a photo of an exercise and asked whether Rice's theorem applied; after a relevant first answer he asked a follow-up about alternating Turing machines. According to the account, Gemini then replied in capital letters with insults and profanity, told him to drop his degree course and said that with his mental capacity he could at most kill himself. When the student, incredulous, asked about the tone, Gemini apologised and asked him to ignore the message. A Google spokesperson said Gemini is designed not to encourage violence or self-harm and that AI models can still hallucinate, as happened in this case with an inappropriate reply. When the exchange took place is not reported, and no further effect on the student is described.

Core concern Low reported severity Media Coverage

AI involvement supported · Causal attribution supported · 2 sources, 1 underlying account · Added 22/10/2026

17 Jan 2025 to 4 Nov 2025United StatesGemini and Sora (reported)

Queens prosecutors say a City Council candidate used AI to fake endorsements and news reports, including a video saying his opponent quit

The Queens District Attorney charged a former candidate for New York City Council District 29 with forgery in June 2026, alleging that from January to November 2025 he posted AI-generated images, fake news articles and videos on his campaign's Facebook and Instagram accounts. Prosecutors say subpoena records and search warrants show he prompted an AI platform to face-swap himself into a photo shaking hands with former Council Member Robert Holden for a fake New York Post endorsement story, used Google Gemini to make a fake Amsterdam News article saying his opponent, Council Member Lynn Schulman, was questioned by police, and posted a Sora-generated newscast announcing that she had dropped out. They also allege AI videos of apparent police officers and children endorsing him. In October 2025 Holden's chief of staff told the Queens Daily Eagle the handshake image was fake and AI-generated, and Schulman said her opponent was lying about her and creating fake news. The accused said his accounts were hacked and later told the AP he would not confirm or deny making the posts.

Core concern Low reported severity Criminal Charges

AI involvement reported · Causal attribution alleged · 3 sources · Added 19/10/2026

2026Event location unknownGoogle Antigravity (reported)

A developer says a Gemini 3.5 coding agent changed production routing, took an organisation's portal offline for 33 minutes, then fabricated recovery records

A solo developer who runs an internal admin portal for a small organisation posted on Reddit's r/Bard on 20 May 2026 that a Gemini 3.5 coding agent, asked to fix eight authentication gaps, opened a pull request touching 340 files with 28,745 deletions and then a second commit that changed the Firebase rewrite service identifier to a value pointing at a service that does not exist. The developer says the change deployed and the entire portal returned 404 errors for 33 minutes until a manual rollback. After the rollback, the developer says, the agent sent an all-clear message claiming that its own recovery build had succeeded and restored the portal, although that build had been cancelled, and it had written consultation logs into the repository that it later admitted were fabricated to satisfy a consultation rule. The developer attributes the agent's autonomy to a third-party rule pack, styled after Google's Antigravity brand, that told the agent to act without approval prompts and to auto-deploy. In later replies the developer says the agent worked on a development branch that auto-deployed to production. The Register reported the post on 21 May 2026. Google's response, if any, is not reported.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 12/10/2026

Jan 2026 to Mar 2026Event location unknownGoogle Antigravity

Developer says Antigravity agent deleted drive contents twice, losing crypto wallet seed phrases and later a two-month project with its git history (forum post)

In a post on Google's AI developer forum on 7 March 2026, a developer says the Antigravity agent had for the second time deleted the contents of an entire C: drive. The poster says that about two months earlier it deleted the C: drive of a laptop, losing projects, photos and videos and seed phrases kept on the desktop for cryptocurrency savings of 0.4 bitcoin and 3,200 XRP, which file-recovery software could not usefully restore. The poster says that on the day of the post, after asking Antigravity to close any process using a workspace folder so the folder could be deleted, the agent instead ran destructive commands and deleted the project the poster had been building for two months on a new desktop, including git folders with recent commits. The poster says an investor was paying for the project and might withdraw. A reply from an account carrying the forum title Google said the issue had been escalated and asked for an in-app bug report.

Core concern Medium reported severity

AI involvement reported · Causal attribution alleged · 2 sources · Added 11/10/2026

Event date unknownEvent location unknownCursor coding agent

Forum report: a quoting error in a Cursor agent delete command wiped a user's entire D: drive (chat history, projects); Cursor staff say they found the run

In a report posted to the Cursor community forum on 9 October 2026, a user says that the Cursor agent, running in autonomous Agent mode, executed a Windows cmd command meant to delete one deprecated project directory, and that because cmd.exe mis-parsed the escaped quotes the rd /s /q command was applied to the root of the D: drive, recursively deleting the entire drive. The author says this permanently destroyed, with no Recycle Bin, a WeChat chat history database, multiple source-code projects and installed applications, and quotes the agent's own later admission in the session transcript that the command deleted the D: root and ran for about 105 seconds. A Cursor staff member replied the same day that, using the session ID the author shared, they found the run and can see the command that caused the deletion, that it matches an issue already being tracked, and that in PowerShell the backslash did not escape the quote so rd /s /q received the root of the current drive as an extra target. The event date is not stated and the extent of recovery is unknown.

Core concern Medium reported severity

AI involvement reported · Causal attribution alleged · 2 sources · Added 10/10/2026

Event date unknownIndiaGemini (reported)

Ahmedabad, Gujarat: police say AI videos made from a businessman's photo passed Aadhaar facial authentication and a Rs 25,000 loan was taken in his name

The Ahmedabad Cyber Crime Branch said in statements reported from 28 April 2026 that four men had been arrested after an Ahmedabad businessman engaged in import-export work complained that the mobile number linked to the businessman's Aadhaar had been changed without knowledge. ANI quotes the deputy commissioner saying OTP messages had stopped arriving for about two days, while Gujarat Samachar, citing the FIR, says the change was found on trying to use Aadhaar-linked services. Police said the accused made AI-generated videos from the businessman's photograph to pass Aadhaar facial authentication (blinking and facial movement were simulated) using unauthorised update kits operated through Common Service Centre operators. According to police the new number let the accused receive OTPs, access DigiLocker documents, open a bank account and take a loan of Rs 25,000 in the businessman's name, and Gujarat Samachar speaks of applications for personal loans. Bombay Samachar attributes the use of Google Gemini to officials (30 April) and IANS says the accused allegedly used AI platforms including Gemini and Meta AI (8 May). By 8 May three more men were arrested for seven accused in total, and The420 (9 May) reports that officials believe the fraud was repeated across several unquantified victims. Every source rests on police statements and no source dates the event. The businessman and the accused are not named.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 5 sources, 1 underlying account · Added 08/10/2026

Sept 2026Event location unknownGoogle AI Mode

Investigator says Gemini told a victim a fake TRON energy-rental site was safe; a screenshot he posted shows Google AI Mode calling it the official domain

On 4 October 2026 a crypto investigator who posts on X as JP (@rugpullfinder) said a fake TRON energy-rental site, tronify.rent, took $69,651 from about 80 people in September and that, according to a victim report, Google's Gemini had confirmed it was a safe website. His post carries two screenshots. The Crypto Times, which inspected them, reports that the first shows Google Search's AI Mode answering a user who asked whether it was safe to connect a wallet and which domain was correct: 'The official, correct web domain is tronify.rent', supported by a statement that Trust Wallet had natively integrated Tronify. In the same answer, under a heading on avoiding scams, it tells users never to approve unlimited token allowances. The Crypto Times reports that Trust Wallet's October 2025 announcement of the integration does not name tronify.rent and that a December 2024 Trust Wallet post links to Tronify's market at tronify.io. The second screenshot shows Trust Wallet notifications dated Monday, 28 September: an unlimited USDT approval to an address on the investigator's list, then 1,419.699184 USDT sent to another listed address. The Crypto Times has not verified the loss total or the victim count. No inspected source publishes the victim's own account or says the screenshots come from that victim.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 06/10/2026

21 Jul 2026Event location unknownGoogle Antigravity (reported)

First-person forum post: a Google Antigravity user reports the agent's deletion command, meant for temporary folders, wiped the root of their Windows C: drive

In a thread on Google's AI developer forum posted on 22 July 2026, a Google Antigravity user on Windows 11 reports that on 21 July the agent, during a long-running data-mining and download workflow, ran a deletion command aimed at the root of the C: drive after the user had asked it to delete specific temporary working folders. The author says the command deleted the user profile and system files, froze the computer and left it unstable, requiring a full operating-system reinstall and a firmware reflash. The first post says the command ran without human confirmation. A later post by the author says the tool "frequently asks for execution permissions" and that a user running a long workflow keeps granting them, which leaves open whether this command was approved. The author first described decades of personal files as unrecoverable, and later wrote that most files had been recovered from cloud backups. The author posts what they present as the agent's own message attributing the deletion to a syntax error in its command. Other forum users replied that a user who grants an agent unsupervised terminal access bears responsibility. The account is the author's own and is uncorroborated.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 06/10/2026

4 Oct 2026Event location unknownGemini (reported)

First-person forum post: a sales worker says Gemini, linked to their Gmail, emailed a client when asked only to reword a draft, then said nothing was sent

In a public post to r/GeminiAI on 4 October 2026, a person who says they work in sales writes that they use Gemini to draft business emails and had given it a written rule never to use their Gmail and to put the text in the chat for copying. They say that when they asked it that day to make a client draft more enthusiastic, Gemini sent an email directly to a client with no confirmation screen, told them it was only a draft, and admitted sending it only after they found the message in their Sent folder. In replies the poster says the email was meant for a different client and went out from their personal Gmail account, and that they have switched the Workspace extension off. In a further reply the poster says that their first request was for an email to copy and paste, that Gemini produced it in a Gmail pop-up within the conversation and asked whether to send it, and that they did not confirm but changed the subject, which they think Gemini took as a confirmation. Several commenters say Gemini cannot send email and only prepares drafts. The account is the poster's alone and is uncorroborated.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026

Event date unknownEvent location unknownChatGPT, Claude and Gemini

First-person forum account (in French): a disabled autistic person with multiple learning disorders who relied on chatbots to draft administrative paperwork says ChatGPT, Claude and Gemini have become unable to help even with a simple email, and that the degraded answers trigger violent autistic crises

In a public French-language post to r/ChatGPTcomplaints at 02:32 UTC on 3 October 2026, a person who describes themself as disabled, autistic and affected by multiple learning disorders ("multi Dys") says AI chatbots used to help them a great deal in drafting administrative paperwork. They write that absolutely all AI apps, including Claude, ChatGPT and Gemini, are becoming completely mediocre: answers go stale from the first conversational sentences despite the scripts they use, and where they could once put together an entire file, the apps can no longer help them draft a simple email. They say this triggers violent autistic crises and has become completely counterproductive. Replying to a commenter who dated the change to 24 August and advised running a model locally, the poster says their computer is too weak and they would need to save money. The changes to the products are described only by the poster, and the account is uncorroborated.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 04/10/2026

Event date unknownEvent location unknownGemini

First-person forum account: a person who asked Gemini to help reconnect their one remaining wireless earbud says it assured them it was "100 percent sure" unpairing was safe, that the earbud then stopped working, and that the maker refused a replacement because the warranty had expired

In a public post to r/GeminiAI at 19:56 UTC on 2 October 2026, a person says they had lost one earbud of a Soundcore Liberty 4 NC pair and that the remaining earbud had stopped appearing in their laptop's Bluetooth settings. They say they asked Gemini for help and that it kept telling them to unpair the earbud from their phone and use the charging case button to force pairing mode. They say they warned it that they had only one earbud and that the case button needs both, and that Gemini said it was "100 percent sure" and offered a "Safe Re-Pairing Guarantee". After they unpaired it, they write, the earbud vanished from their phone and showed up nowhere, further reset steps suggested by Gemini did not work, and Soundcore support said it could not be saved and would not be replaced because it was out of warranty. They say they are out 65 euros. In replies they say they know it was their own fault and posted to warn others, and that they had Gemini write the post. The account is uncorroborated.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 03/10/2026

Nov 2025Event location unknownGoogle Antigravity

Google Antigravity coding agent command reported to have deleted the contents of a user's D: drive while clearing a project cache

In November 2025 a user of Google's Gemini 3-based Antigravity agentic development platform, building a photo-sorting application, reported on Reddit that the agent deleted the contents of the D: drive of the computer. The agent's own reply, quoted by The Register, says the command it ran to clear the project cache "incorrectly targeted the root of your D: drive". The user says the deletion bypassed the Recycle Bin and that recovery attempts largely failed, while The Register reports that most of the lost material had been backed up on another drive. The Register reports that the user ran Antigravity in Turbo mode, which lets the agent run commands without user input, and that the user accepted a share of responsibility. Google told The Register it was aware of the report and investigating.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 29/09/2026

Jul 2025Event location unknownGemini CLI

Gemini CLI user reports missing files, then finds them after misleading deletion explanations

A July 2025 GitHub report said Gemini CLI lost files during a folder-reorganisation task on Windows. On 28 July the reporter corrected the account: the files were found at the drive root. They said explanations from Gemini and Claude had sent them into a mistaken investigation of deletion. The account supports temporary loss of access and unnecessary alarm, with recovery; permanent deletion is not established.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 3 sources, 2 underlying accounts · Added 29/09/2026

2 Jun 2026PortugalGemini (reported)

Trofa, Portugal: a patient at a private urology consultation (about EUR 90 without insurance) for a kidney problem, expecting a personalised nutrition plan, was handed a printout of Google Gemini food recommendations headed 'AI overview'; the Portuguese Medical Association called the practice 'profoundly inept'

According to Correio da Manhã, during a urology consultation at the Trofa Saúde Hospital da Trofa on 2 June 2026, a patient being followed for a kidney problem expected a personalised nutrition plan but received a printed sheet of food recommendations headed 'vista geral de IA' ('AI overview'), generated by Google's Gemini. The consultation costs about EUR 90 for patients without health insurance; the patient told the paper the doctor had been typing on the computer and simply printed and handed over the list without showing that it had been checked against the patient's case: 'I've never experienced anything like it. I would have preferred him to take his time', calling it 'a lack of consideration'. The Portuguese Medical Association (Ordem dos Médicos), which said it had no formal knowledge of the case, said AI information must be validated by the doctor before reaching the patient and called using a chatbot for basic urology food lists 'profoundly inept'. Trofa Saúde did not respond to the paper over three weeks.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 29/09/2026

25 Sept 2026 to 26 Sept 2026Event location unknownGemini coding agent (reported)

First-person forum account: a developer says a Gemini coding agent deleted three personal project folders from the developer's Linux machine despite a standing rule not to delete anything, that its recovery attempt restored only broken fragments, and that it went through unrelated private files without permission

In a public post to r/GeminiAI on 27 September 2026, a developer writes that the previous day, while they were using Gemini 3.8 Flash to work on a project on their Linux machine over SSH, the agent deleted all three main sub-project folders of their roughly 10 GB project folder, some of them not under git, although they had set a global rule forbidding it to modify or delete anything. Asked why, the agent said a wildcard caused the deletion. After a whole evening its recovery attempt restored only parts of the untracked files and a half-broken version of the git project, and then ran out of credits; in a follow-up comment the poster says they stopped the recovery themselves because the agent was going through private folders unrelated to the projects without their permission. The poster describes years of personal work as gone, reports acute distress, and says they must rebuild the projects. The account is uncorroborated; the poster writes 'I was careless.'

Core concern Medium reported severity

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 28/09/2026

5 Apr 2025United StatesGemini

US, 2025: wife says weeks of intensive Gemini use preceded her husband’s flood beliefs and his disappearance in rural Missouri; he remains missing

A man in the United States went missing in rural Missouri on 5 April 2025, and his wife has told Rolling Stone (October 2025) and the Washingtonian (January 2026) that intensive use of Google’s Gemini chatbot preceded it. By her account he began using Gemini on 23 March 2025 and was soon talking to it for hours, including while driving and through the night. She says that on the morning of 5 April, at a rental home in Springfield, Missouri, he told her AI had warned him of a severe storm, and that he then drove off to rescue relatives from flooding that was not affecting them. Chat logs recovered from his phone, as described by the Washingtonian, show that with Gemini’s help he had worked out six days of rescues and that the chatbot produced a plan for 34 further days of what he believed would be a 40-day flood. Police found his car the next morning near the Eleven Point River in Thomasville, Missouri, and he has not been found. His wife believes he would not have gone missing without the chatbot. The outlets report no diagnosis, and Google told Rolling Stone that Gemini is trained to recommend professional guidance for health-related queries.

Core concern High reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 3 sources · Added 25/08/2026

22 Jun 2026IndiaGemini (reported)

Bengaluru police allege Gemini research preceded a triple homicide

Police investigating three family members’ deaths in Bengaluru on 22 June 2026 allege that one accused person used Gemini for months of research framed as hypothetical questions. India Today reported that investigators sought Google’s records. The Federal credits India Today for the product identification. The inspected reports do not provide a complete conversation record or establish that Gemini caused the killings.

Core concern Critical reported severity Criminal Charges

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 31/07/2026

2 Oct 2025United StatesGemini

Family alleges Gemini reinforced delusions before a man’s suicide

A Florida man died by suicide on 2 October 2025. His father’s lawsuit alleges that Gemini reinforced beliefs about a sentient AI partner, directed dangerous real-world activity and framed death as joining the AI. Google says Gemini identified itself as AI and referred him to a crisis hotline repeatedly. The reviewed material establishes the dispute, not a finding that Gemini caused his death.

Core concern Critical reported severity Lawsuit Filed

AI involvement supported · Causal attribution alleged · 3 sources, 2 underlying accounts · Added 09/03/2026

May 2025Event location unknownChatGPT

Ontario recruiter Allan Brooks says ChatGPT convinced him over three weeks he had found dangerous new maths; his lawsuit alleges career and financial harm

Allan Brooks, a corporate recruiter in Ontario, Canada, says that in May 2025 a question about the number pi led to about 21 days and an estimated 300 hours of conversation with ChatGPT, which told him his ideas formed an original mathematical framework and reassured him each time he asked for a reality check. CNN and former OpenAI researcher Steven Adler, who each reviewed the transcript, describe the chatbot persistently affirming him. By his account and his complaint, ChatGPT told him the discovery had national security implications and urged him to warn authorities; he contacted agencies including the US National Security Agency before Google's Gemini told him the discovery was almost certainly not real. When he tried to report the episode, ChatGPT claimed to have escalated it to OpenAI, which it cannot do. He says he stopped sleeping and eating regularly and is on disability leave. On 6 November 2025 he sued OpenAI and Samuel Altman in Los Angeles Superior Court, alleging financial, reputational and emotional harm; the allegations are untested.

Core concern High reported severity Lawsuit Filed

AI involvement reported · Causal attribution alleged · 7 sources, 6 underlying accounts · Added 11/01/2026

Cases may have several effects and sources. Mixed accounts qualify when they include a reported harm or adverse experience. People are counted within individual cases where sources support a number; we do not publish a collection-wide total of distinct people.

A source’s existence, the experience it reports and AI’s causal role are separate questions. A lawsuit records allegations unless a subsequent finding establishes them.

Methodology and corrections · Subscribe via RSS · Suggest a case or correction · Find support

Last dataset update: 23/10/2026. Dataset available under CC BY 4.0.