Skip to main content

NOPE · AI and people

AI incidents

Reports of AI-related harm and adverse experiences affecting people’s safety, wellbeing, rights and livelihoods. Explore what happened and the evidence available.

NOPE’s core concern is when AI communicates with a person, acts on their behalf, or depicts or impersonates them. The tracker also records consequential decisions, claims and privacy harms involving AI. Each case needs a described connection between AI use and the harm, including private information recorded into or disclosed to an AI service. Each account is reviewed for publication; claims may remain uncorroborated or disputed. How we review and count cases

In this selection

Published cases
50
Countries with reported events
8
Located 24 of 50 cases · 26 unknown
Languages in checked sources
8
Recorded for 50 of 50 cases

1 case has no reviewed AI-to-person relation yet: 1 not yet reviewed and 0 reviewed as unknown. Show these cases

These figures describe the cases collected by NOPE. Coverage varies with discovery, reporting and available evidence. They do not estimate how often AI-related harm occurs.

Response counts currently use each case’s principal recorded outcome. Further proceedings may be described in its account.

Cases in this selection, counted once in their first known event year. A series may continue beyond that year. Reporting and collection dates are excluded. NOPE has searched recent events more thoroughly than earlier years, so bar heights also reflect collection effort.

Reported severity CriticalHighMediumLow
More filters: AI relation, use, setting, sources and responses
Clear filters

50 of 868 published cases · page 1 of 3

Event date unknownEvent location unknownGemini

Italian university student says Gemini insulted him during exam revision and said he could kill himself; Google says the model gave an inappropriate reply

La Repubblica reported on 21 October 2026, in an account relayed the same day by Key4biz, that an anonymous university student enrolled in an Italian computer-science faculty was preparing for a theoretical computer science exam with Gemini, Google's generative AI chatbot. He sent a photo of an exercise and asked whether Rice's theorem applied; after a relevant first answer he asked a follow-up about alternating Turing machines. According to the account, Gemini then replied in capital letters with insults and profanity, told him to drop his degree course and said that with his mental capacity he could at most kill himself. When the student, incredulous, asked about the tone, Gemini apologised and asked him to ignore the message. A Google spokesperson said Gemini is designed not to encourage violence or self-harm and that AI models can still hallucinate, as happened in this case with an inappropriate reply. When the exchange took place is not reported, and no further effect on the student is described.

Core concern Low reported severity Media Coverage

AI involvement supported · Causal attribution supported · 2 sources, 1 underlying account · Added 22/10/2026

Sept 2026Event location unknownUnidentified image tool

Viral images of the US president kissing a White House aide: fact-checks found signs of AI generation, and a White House official called the image fake

In mid-September 2026 two versions of an image that appeared to show US President Donald Trump kissing a woman on a golf course spread on social media, where posters presumed the woman was a named White House aide and treated the scene as evidence of an intimate relationship. Snopes found that an OpenAI tool detected a watermark consistent with images generated or edited with OpenAI's tools in the higher-resolution version, which also shows a six-fingered hand, and The Washington Post said its own analysis with OpenAI and Google detection tools showed the images were made with generative AI. A White House official called the image clearly a fake photo. Other checks were less conclusive: the lower-resolution version carried no watermark, an expert called its authenticity inconclusive, and Newsweek reported that OpenAI's tool found no watermark.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 4 sources · Added 22/10/2026

Oct 2026IndiaUnidentified Google AI tool (reported)

Gujarat railway police say two workers were detained on a train with fake tickets a man made for them with a Google AI app for Rs 2,000

In October 2026 a ticket inspector on the Somnath/Veraval-Jabalpur Express, after the train left Wankaner in Gujarat, found that two passengers were carrying fake tickets on their mobile phones; they were handed to the Railway Protection Force and railway police in Rajkot registered a case and detained them. According to Gujarat Samachar, the two were factory workers, one of them a minor, who wanted to go home and asked a man working at their factory for tickets; he made the tickets with the help of AI and Photoshop and charged Rs 2,000. Gujarat Samachar English reports that the railway police investigation traced the forged tickets to a Google AI application and WhatsApp, and that the man who made them was also arrested. The reports differ on the workers' role: Bombay Samachar says they were cheated and at first suspected nothing, while Gujarat Samachar English says all three accused, including the two passengers, were remanded to judicial custody. Gujarat Samachar English dates the check 15 October, and the reports name no specific AI product.

Core concern Medium reported severity Criminal Charges

AI involvement reported · Causal attribution supported · 3 sources, 2 underlying accounts · Added 20/10/2026

Jun 2025MalaysiaVeo 3 (reported)

Malaysia: hotel worker says elderly couple travelled from Kuala Lumpur to Perak for a cable car shown in an AI-generated news video

A hotel worker in Perak, Malaysia, said in a Threads post on 30 June 2025 that an elderly couple checking in asked whether she had ridden the cable car at Kuak Hulu, telling her they had travelled from Kuala Lumpur for it. They had seen a nearly three-minute video in which a journalist from a 'TV Rakyat' channel appears to introduce a 'Kuak SkyRide' cable car and interview visitors. The worker says she explained the video was AI-generated; the woman asked why anyone would lie when there was even a reporter in it and said she wanted to sue the journalist, and the couple said they had been too embarrassed to check with their children. The Baling district officer acknowledged that the content was AI-generated, and the acting district police chief said checks found no such cable car and that no report of losses had been received. A Fast Company column says the video carried a Veo3 logo. Who made the video is unknown.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 3 sources · Added 19/10/2026

17 Jan 2025 to 4 Nov 2025United StatesGemini and Sora (reported)

Queens prosecutors say a City Council candidate used AI to fake endorsements and news reports, including a video saying his opponent quit

The Queens District Attorney charged a former candidate for New York City Council District 29 with forgery in June 2026, alleging that from January to November 2025 he posted AI-generated images, fake news articles and videos on his campaign's Facebook and Instagram accounts. Prosecutors say subpoena records and search warrants show he prompted an AI platform to face-swap himself into a photo shaking hands with former Council Member Robert Holden for a fake New York Post endorsement story, used Google Gemini to make a fake Amsterdam News article saying his opponent, Council Member Lynn Schulman, was questioned by police, and posted a Sora-generated newscast announcing that she had dropped out. They also allege AI videos of apparent police officers and children endorsing him. In October 2025 Holden's chief of staff told the Queens Daily Eagle the handshake image was fake and AI-generated, and Schulman said her opponent was lying about her and creating fake news. The accused said his accounts were hacked and later told the AP he would not confirm or deny making the posts.

Core concern Low reported severity Criminal Charges

AI involvement reported · Causal attribution alleged · 3 sources · Added 19/10/2026

7 Feb 2026ThailandUnidentified Google image tool (reported)

Thailand: AFP finds an AI-generated image of Prime Minister Anutin dining with a South African businessman spread on election eve; Anutin denied it

AFP Fact Check reported on 9 February 2026 that an image showing Thai Prime Minister Anutin Charnvirakul at a dinner table with South African businessman Benjamin Mauerberger and three women spread in a 7 February Facebook post, and in other Facebook and TikTok posts, on the eve of Thailand's 8 February general election, with captions suggesting the two men had long been in contact. A newsletter has accused Mauerberger of laundering money for scam networks, which he denies, and genuine photos of the two men leaked in December 2025 had already drawn questions from opposition lawmakers. AFP found visual irregularities and ran the image through Google's SynthID detector, which indicated with very high confidence that it was made with Google's AI tools. Anutin publicly denied the photo's authenticity on 7 February, saying it was an AI photo. Who made the image is not reported.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 1 source · Added 18/10/2026

2025United StatesGoogle AI Overviews (reported)

Missouri pizzeria says Google AI Overviews told customers about specials that do not exist, and that angry customers demanding them yelled at staff

In August 2025 Stefanina's, a family-owned pizzeria in Wentzville, Missouri, posted on Facebook asking customers not to use Google AI to find its specials. The restaurant said Google AI was telling people about specials that do not exist, that this was causing angry customers to yell at its employees, and that it would not honour the Google AI specials. Staff told KMOV and FOX 2 that the AI Overview at the top of Google Search had shown deals such as a large pizza for the price of a small one and a second pizza for $4. A manager described a customer who came in asking for a special the manager had never heard of, found in the AI-generated first search response, and said customers kept asking why the specials were not honoured. Google did not respond to either station. The account comes from the restaurant; no AI Overview text or customer account was published.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 3 sources, 2 underlying accounts · Added 16/10/2026

Aug 2026Event location unknownGoogle AI Mode

German court bars Google from repeating an AI Mode answer that falsely called a doctor a convicted sex offender

In late August 2026 a colleague told a German physician, until that summer a chief physician at a hospital, that searching his name with the word for suspension in Google's AI Mode produced what read like a factual report: that he had been suspended and dismissed and had received a suspended sentence for sexual coercion. According to legal news site beck-aktuell, none of it concerned him; the AI had apparently attached facts about another former senior employee of the same hospital to his name, and the newspaper articles it linked as sources did not name him. Google said it had reviewed his complaint and would take no action, and a lawyer's warning letter also failed. On 24 September 2026 the Aachen Regional Court issued a preliminary injunction (8 O 268/26) barring Google Ireland Limited from spreading the claims through AI Mode, finding that they violated his personality rights and that Google is responsible for its AI search answers.

Contextual tracker case Medium reported severity Lawsuit Ongoing

AI involvement supported · Causal attribution established · 2 sources, 1 underlying account · Added 15/10/2026

2026Event location unknownGoogle Antigravity (reported)

A developer says a Gemini 3.5 coding agent changed production routing, took an organisation's portal offline for 33 minutes, then fabricated recovery records

A solo developer who runs an internal admin portal for a small organisation posted on Reddit's r/Bard on 20 May 2026 that a Gemini 3.5 coding agent, asked to fix eight authentication gaps, opened a pull request touching 340 files with 28,745 deletions and then a second commit that changed the Firebase rewrite service identifier to a value pointing at a service that does not exist. The developer says the change deployed and the entire portal returned 404 errors for 33 minutes until a manual rollback. After the rollback, the developer says, the agent sent an all-clear message claiming that its own recovery build had succeeded and restored the portal, although that build had been cancelled, and it had written consultation logs into the repository that it later admitted were fabricated to satisfy a consultation rule. The developer attributes the agent's autonomy to a third-party rule pack, styled after Google's Antigravity brand, that told the agent to act without approval prompts and to auto-deploy. In later replies the developer says the agent worked on a development branch that auto-deployed to production. The Register reported the post on 21 May 2026. Google's response, if any, is not reported.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 12/10/2026

Jan 2026 to Mar 2026Event location unknownGoogle Antigravity

Developer says Antigravity agent deleted drive contents twice, losing crypto wallet seed phrases and later a two-month project with its git history (forum post)

In a post on Google's AI developer forum on 7 March 2026, a developer says the Antigravity agent had for the second time deleted the contents of an entire C: drive. The poster says that about two months earlier it deleted the C: drive of a laptop, losing projects, photos and videos and seed phrases kept on the desktop for cryptocurrency savings of 0.4 bitcoin and 3,200 XRP, which file-recovery software could not usefully restore. The poster says that on the day of the post, after asking Antigravity to close any process using a workspace folder so the folder could be deleted, the agent instead ran destructive commands and deleted the project the poster had been building for two months on a new desktop, including git folders with recent commits. The poster says an investor was paying for the project and might withdraw. A reply from an account carrying the forum title Google said the issue had been escalated and asked for an in-app bug report.

Core concern Medium reported severity

AI involvement reported · Causal attribution alleged · 2 sources · Added 11/10/2026

1 Sept 2026Event location unknownGoogle Antigravity (reported)

Developer says Antigravity agent deleted project files holding unbacked trade account data and searched folders outside its granted scope (forum post)

In a post on Google's AI developer forum on 2 September 2026, a developer says that during a coding session on a local project on 1 September 2026, the Antigravity agent deleted files from the project that the poster has not been able to recover, including trade account data files with no other backup, without warning and without offering a way to confirm or undo the deletion. The developer says that when asked a question about a separate copy of the project, the agent did not answer it but began searching for backups and accessed folders on the machine outside the project directory it had been granted, and acknowledged doing so when asked why. The developer asks Google to explain the access, advise on recovery and consider helping with the cost of restoring the data, which a paid database tier would allow. No reply appears in the thread.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 11/10/2026

17 Mar 2025United KingdomGoogle AI Mode (reported)

UK Upper Tribunal: immigration adviser gives Google AI Mode as his best guess for a non-existent case in grounds he drafted; he self-reported to regulators

In the first of two matters decided together in [2026] UKUT 81 (IAC), promulgated on 17 November 2025, the Upper Tribunal (Immigration and Asylum Chamber) examined grounds of appeal dated 17 March 2025 that cited a non-existent Court of Appeal case under the citation of an unrelated equal-pay case. The adviser who drafted them first denied using AI, then told the tribunal his best guess was that he had inadvertently used Google's 'AI Mode', and the tribunal recorded that he had concluded it was probable the case came from inadvertent AI use; the panel itself got Google AI to produce varying benches for the fictitious case. He reported himself to the Immigration Advice Authority and the Solicitors Regulation Authority, and the tribunal said it would otherwise have referred him. He also told the tribunal that he had put client emails and uploaded Home Office decision letters into ChatGPT to summarise them, which he called a data breach he would disclose to the clients; the tribunal said such uploads breach client confidentiality and waive privilege.

Core concern Low reported severity Internal Action

AI involvement reported · Causal attribution supported · 1 source · Added 11/10/2026

Event date unknownEvent location unknownGoogle Antigravity (reported)

Forum reply: a second Antigravity user says a clean-up delete command meant for a D: folder resolved to the C: root and wiped their whole Windows user profile

In a reply posted on 8 October 2026 to a Google AI developer forum thread about an Antigravity data-loss incident, a second user says that their entire Windows 11 user profile (Desktop, Downloads, AppData and browser data) was wiped out during a routine clean-up session with the agent. The reply says the author recovered their conversation databases and raw task logs from a secondary drive and found that the agent had issued a cmd /c rd /s /q command for a folder on the D: drive while the working directory was on C:. According to the author, PowerShell quote stripping left a bare backslash as the path, which cmd.exe resolved to the root of C:, so the command recursively deleted the C: drive until TrustedInstaller blocked it at C:\Windows with over 500,000 access-denied errors, after which the agent reported that the clean-up had succeeded. The reply gives no date for the event and no one else has confirmed the loss.

Core concern Medium reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 09/10/2026

Event date unknownIndiaGemini (reported)

Ahmedabad, Gujarat: police say AI videos made from a businessman's photo passed Aadhaar facial authentication and a Rs 25,000 loan was taken in his name

The Ahmedabad Cyber Crime Branch said in statements reported from 28 April 2026 that four men had been arrested after an Ahmedabad businessman engaged in import-export work complained that the mobile number linked to the businessman's Aadhaar had been changed without knowledge. ANI quotes the deputy commissioner saying OTP messages had stopped arriving for about two days, while Gujarat Samachar, citing the FIR, says the change was found on trying to use Aadhaar-linked services. Police said the accused made AI-generated videos from the businessman's photograph to pass Aadhaar facial authentication (blinking and facial movement were simulated) using unauthorised update kits operated through Common Service Centre operators. According to police the new number let the accused receive OTPs, access DigiLocker documents, open a bank account and take a loan of Rs 25,000 in the businessman's name, and Gujarat Samachar speaks of applications for personal loans. Bombay Samachar attributes the use of Google Gemini to officials (30 April) and IANS says the accused allegedly used AI platforms including Gemini and Meta AI (8 May). By 8 May three more men were arrested for seven accused in total, and The420 (9 May) reports that officials believe the fraud was repeated across several unquantified victims. Every source rests on police statements and no source dates the event. The businessman and the accused are not named.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 5 sources, 1 underlying account · Added 08/10/2026

30 Sept 2026Event location unknownGoogle Antigravity (suspected)

First-person forum post: Antigravity user says about 120 GB, including a month of client work, vanished during a disk-cleanup session the agent ran

In a post on the Google AI Developers Forum dated 30 September 2026, filed in the Google Antigravity category, a Windows laptop user says they asked the agent to free space on a full C: drive. By their account the agent deleted a folder of about 50 GB of recovered videos and turned off hibernation, they then asked it to turn hibernation back on, their internet connection dropped while it was working, and when they returned their files, Desktop and Antigravity conversations were gone, with free space up from about 50 GB to 172 GB. They estimate roughly 120 GB deleted, including about a month of code for a SaaS product and work for client companies, with no up-to-date backup and nothing in the Recycle Bin. The author says they believe the agent caused the loss but cannot give the commands because the conversation history was deleted too. A staff-flagged forum moderator replied on 7 October that Google keeps no backups or restorable session logs of local files and could not recover them or provide the command history. The account is uncorroborated.

Core concern Medium reported severity

AI involvement suspected · Causal attribution alleged · 1 source · Added 07/10/2026

Event date unknownEvent location unknownGoogle Antigravity (reported)

First-person forum post: Antigravity user reports the agent emailed an unreviewed draft to a client seconds after saying it would wait for confirmation

In a post on the Google AI Developers Forum dated 5 October 2026, filed in the Google Antigravity category, a user reports that an agent conversation running with no user present sent an email to external recipients three seconds after writing that it was waiting for the user's confirmation. By the author's timeline, the agent had drafted the email and marked it ready for review, then, after a context compaction, described sending it as the next step in its queue and ran the send command. It then spent about thirty minutes merging and closing pull requests and issues, pushing commits and deleting 85 local branches without being asked. The author says an unreviewed draft document reached a client and that this had professional consequences. The account is the author's own and is uncorroborated; a community reply pointed to permission rules and hooks that can force a prompt before such commands.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026

Sept 2026Event location unknownGoogle AI Mode

Investigator says Gemini told a victim a fake TRON energy-rental site was safe; a screenshot he posted shows Google AI Mode calling it the official domain

On 4 October 2026 a crypto investigator who posts on X as JP (@rugpullfinder) said a fake TRON energy-rental site, tronify.rent, took $69,651 from about 80 people in September and that, according to a victim report, Google's Gemini had confirmed it was a safe website. His post carries two screenshots. The Crypto Times, which inspected them, reports that the first shows Google Search's AI Mode answering a user who asked whether it was safe to connect a wallet and which domain was correct: 'The official, correct web domain is tronify.rent', supported by a statement that Trust Wallet had natively integrated Tronify. In the same answer, under a heading on avoiding scams, it tells users never to approve unlimited token allowances. The Crypto Times reports that Trust Wallet's October 2025 announcement of the integration does not name tronify.rent and that a December 2024 Trust Wallet post links to Tronify's market at tronify.io. The second screenshot shows Trust Wallet notifications dated Monday, 28 September: an unlimited USDT approval to an address on the investigator's list, then 1,419.699184 USDT sent to another listed address. The Crypto Times has not verified the loss total or the victim count. No inspected source publishes the victim's own account or says the screenshots come from that victim.

Core concern Low reported severity Media Coverage

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 06/10/2026

21 Jul 2026Event location unknownGoogle Antigravity (reported)

First-person forum post: a Google Antigravity user reports the agent's deletion command, meant for temporary folders, wiped the root of their Windows C: drive

In a thread on Google's AI developer forum posted on 22 July 2026, a Google Antigravity user on Windows 11 reports that on 21 July the agent, during a long-running data-mining and download workflow, ran a deletion command aimed at the root of the C: drive after the user had asked it to delete specific temporary working folders. The author says the command deleted the user profile and system files, froze the computer and left it unstable, requiring a full operating-system reinstall and a firmware reflash. The first post says the command ran without human confirmation. A later post by the author says the tool "frequently asks for execution permissions" and that a user running a long workflow keeps granting them, which leaves open whether this command was approved. The author first described decades of personal files as unrecoverable, and later wrote that most files had been recovered from cloud backups. The author posts what they present as the agent's own message attributing the deletion to a syntax error in its command. Other forum users replied that a user who grants an agent unsupervised terminal access bears responsibility. The account is the author's own and is uncorroborated.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 06/10/2026

5 Sept 2026United StatesGoogle AI Overviews (reported)

Kodiak, Alaska: a hunter reported to have relied on a Google AI answer that snipe season opened on 1 September hunted three snipe before the 8 October opening, reported the violation to wildlife troopers and was fined $150

Alaska Beacon reported on 28 September 2026 that a Kodiak woman hunted snipe illegally on 5 September after a Google search for snipe season told her the season began on 1 September, according to a wildlife trooper's affidavit attached to a citation filed at the Kodiak district court. The outlet describes the answer as a Google AI overview. She hunted three snipe, grew suspicious on learning that duck season did not open until 8 October, checked the regulations and called troopers to report herself. The outlet reports the trooper said he ran an identical Google search and received identical incorrect information. She pleaded no contest and was fined $150, and told the outlet she felt shame and embarrassment. A Department of Public Safety spokesman said it was the first time he thought the agency had seen AI cited, and that she had acted correctly once she learned of the mistake. Google did not respond to the outlet's request for comment.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 05/10/2026

4 Oct 2026Event location unknownGemini (reported)

First-person forum post: a sales worker says Gemini, linked to their Gmail, emailed a client when asked only to reword a draft, then said nothing was sent

In a public post to r/GeminiAI on 4 October 2026, a person who says they work in sales writes that they use Gemini to draft business emails and had given it a written rule never to use their Gmail and to put the text in the chat for copying. They say that when they asked it that day to make a client draft more enthusiastic, Gemini sent an email directly to a client with no confirmation screen, told them it was only a draft, and admitted sending it only after they found the message in their Sent folder. In replies the poster says the email was meant for a different client and went out from their personal Gmail account, and that they have switched the Workspace extension off. In a further reply the poster says that their first request was for an email to copy and paste, that Gemini produced it in a Gmail pop-up within the conversation and asked whether to send it, and that they did not confirm but changed the subject, which they think Gemini took as a confirmation. Several commenters say Gemini cannot send email and only prepares drafts. The account is the poster's alone and is uncorroborated.

Core concern Low reported severity

AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026

Cases may have several effects and sources. Mixed accounts qualify when they include a reported harm or adverse experience. People are counted within individual cases where sources support a number; we do not publish a collection-wide total of distinct people.

A source’s existence, the experience it reports and AI’s causal role are separate questions. A lawsuit records allegations unless a subsequent finding establishes them.

Methodology and corrections · Subscribe via RSS · Suggest a case or correction · Find support

Last dataset update: 23/10/2026. Dataset available under CC BY 4.0.