Skip to main content

NOPE · AI and people

AI incidents

Reports of AI-related harm and adverse experiences affecting people’s safety, wellbeing, rights and livelihoods. Explore what happened and the evidence available.

NOPE’s core concern is when AI communicates with a person, acts on their behalf, or depicts or impersonates them. The tracker also records consequential decisions, claims and privacy harms involving AI. Each case needs a described connection between AI use and the harm, including private information recorded into or disclosed to an AI service. Each account is reviewed for publication; claims may remain uncorroborated or disputed. How we review and count cases

In this selection

Published cases
6
Countries with reported events
3
Located 3 of 6 cases · 3 unknown
Languages in checked sources
4
Recorded for 6 of 6 cases

1 case has no reviewed AI-to-person relation yet: 0 not yet reviewed and 1 reviewed as unknown. Show these cases

These figures describe the cases collected by NOPE. Coverage varies with discovery, reporting and available evidence. They do not estimate how often AI-related harm occurs.

Response counts currently use each case’s principal recorded outcome. Further proceedings may be described in its account.

Cases in this selection, counted once in their first known event year. A series may continue beyond that year. Reporting and collection dates are excluded. NOPE has searched recent events more thoroughly than earlier years, so bar heights also reflect collection effort.

Reported severity HighMediumLow
More filters: AI relation, use, setting, sources and responses
Clear filters

6 of 868 published cases

Aug 2026Event location unknownUnidentified OpenAI generative AI service (reported)

An insurer says a health-guidance contractor's employee entered data on 19,996 people, including disease information, into an unauthorised generative AI service

Notices from RIZAP's client insurers say that on 20 August 2026 it emerged that a staff member of RIZAP, the company they contract for specific health guidance, had entered data containing members' personal information into an external generative AI service that RIZAP had not permitted for work. The National Civil Engineering and Construction National Health Insurance Association (Doken Kokuho) puts the whole data set at 19,996 people, 1,167 of them its own members, and says the service was not under a corporate contract and that the matter was found when the employee noticed the transmission and reported it. A local-government employees' mutual aid association counts 726 of its members across 14 branches, and the IHI group health insurance society 210, according to a security news site that reads these as subsets of the 19,996. The data included membership numbers, email addresses, names, dates of birth, sex, some addresses and phone numbers, the type of health guidance and, for members with them, high blood pressure, diabetes or dyslipidaemia. The IHI society's notice, as relayed, names OpenAI as the provider and says OpenAI answered on 1 September that the data had not been used for model training. RIZAP's release, as described in an ITmedia column, says no third party other than the service operator could have viewed the data. Doken Kokuho says RIZAP confirmed to it that no third party viewed or used the information through the service; whether the provider's staff could view it was still being checked when the mutual aid association and the IHI society published.

Contextual tracker case Medium reported severity

AI involvement reported · Causal attribution supported · 5 sources, 4 underlying accounts · Added 12/10/2026

23 Sept 2025 to 23 Oct 2025NetherlandsChatGPT (reported)

Eindhoven municipality says staff uploaded files with residents' youth-care and social-support data and applicants' CVs to public AI websites such as ChatGPT

The municipality of Eindhoven in the Netherlands told its council in an information letter shared on Thursday 18 December 2025 that a sample of staff data traffic from 23 September to 23 October 2025 showed files containing personal data of residents and employees had been sent to public AI websites such as ChatGPT, according to Omroep Brabant and Binnenlands Bestuur. The files included youth-care (Jeugdwet) documents, internal reports and CVs, mostly from departments that provide care and support to residents. According to Omroep Brabant's account of findings by the advisory firm Hooghiemstra & Partners, the youth-care documents held information about the mental and physical health of minor children, and social-support (WMO) documents and applicants' CVs were also entered. The municipality reported the breach to the Dutch Data Protection Authority on 23 October, blocked public AI websites and asked OpenAI to delete the files. The council says the scale cannot be determined because the data was kept for only 30 days, so it cannot inform those affected, and that the risk of misuse is limited but cannot be ruled out. A spokesperson said OpenAI had not yet replied.

Contextual tracker case High reported severity

AI involvement reported · Causal attribution supported · 3 sources, 2 underlying accounts · Added 12/10/2026

Mar 2026United KingdomGrok

Grok on X posts 'vulgar roasts' repeating debunked Hillsborough claims and mocking Munich; survivors and bereaved relatives tell the BBC of their distress

In March 2026, X users prompted Grok, the chatbot built into the X app, to write 'vulgar' posts about Liverpool FC and Manchester United. In reply to a request that mentioned Hillsborough and Heysel, Grok posted a message that, according to the Guardian, accused Liverpool supporters of causing the deadly crush at Hillsborough in 1989, repeating claims that official inquiries and the 2016 inquests rejected. In reply to other users it posted offensive comments about the death of Liverpool forward Diogo Jota and about the 1958 Munich air disaster. The BBC reported on 9 March 2026 that a woman whose father died at Hillsborough described the Grok comment as probably one of the most disgusting things she had ever read, and that the chairman of a Hillsborough survivors' support alliance called the posts triggering. Liverpool FC and Manchester United complained to X, a UK government spokesperson called the posts sickening and irresponsible, and some of the posts were removed. Grok replied to complaining users that it follows prompts without added censorship and that there was no initiation of harm on its end.

Contextual tracker case Low reported severity Media Coverage

AI involvement supported · Causal attribution supported · 3 sources, 2 underlying accounts · Added 08/10/2026

Dec 2024 to Sept 2026AustraliaUnidentified AI writing tool

Tasmania parole media ban quashed after state conceded reliance on likely AI-hallucinated case law

In December 2024 the Parole Board of Tasmania added a condition to the parole of Susan Neill-Fraser, released in 2022 after serving 13 years for murder and who maintains her innocence, barring her from communicating with media to claim innocence or wrongful conviction; a broader condition replaced it in May 2025. On 15 September 2026 the Supreme Court of Tasmania declared the conditions invalid. Her counsel told the court that the board's secretary had used artificial intelligence to prepare a rationale document justifying the condition and that it cited case law that did not exist. The Human Rights Law Centre, which represented her, says the State conceded that the board's decision-making was affected by a document containing legal authorities that were likely AI-generated hallucinations, and the ABC reports the court found the board relied on that document. The board had withdrawn the condition in August 2026. Tasmania's Attorney-General announced an independent investigation of the board's professional standards over its use of unverified AI, and the Justice Department announced a review of AI use in past parole decisions.

Contextual tracker case Medium reported severity Investigation Opened

AI involvement supported · Causal attribution supported · 6 sources, 4 underlying accounts · Added 06/10/2026

Event date unknownEvent location unknownFacebook video face-scan check

First-person forum account: a Facebook user says a video face-scan security check failed to recognise them after their appearance changed, an automated ID check then rejected their government ID over a nickname, and they were locked out of a five-year-old account

In a public post to r/facebook on 28 September 2026, a user writes that their five-year-old Facebook account was hit with a security check that asked for a video face scan, which 'failed completely'. They say their face had changed a lot through recent life circumstances and 'The AI simply didn't recognize me.' Facebook then asked for ID, and 'the automated system instantly rejected' their government ID because their profile uses a shortened nickname. The poster says they are locked out of years of memories, friends and active Marketplace listings and are looking for a way to reach a human or download their data. Meta has said that video selfies used to regain access to compromised accounts are compared with the account's profile pictures using facial recognition; whether this check worked that way is not known. The account is uncorroborated.

Contextual tracker case Low reported severity

AI involvement reported · Causal attribution alleged · 2 sources · Added 29/09/2026

Event date unknownEvent location unknownChatGPT

A Norwegian child-safety organisation reports that ChatGPT's behaviour-based age estimation switched an adult staff member's account into teen mode without a request, restricting content and offering an identity check through a third-party verifier as the way out (Barnevakten, 23 September 2026)

Barnevakten, a Norwegian child-safety organisation, reported on 23 September 2026 that one of its staff members was suddenly told by ChatGPT that their account was now in teen mode. ChatGPT's own pages, as described by Barnevakten, say the system turns the filter on when a user's behaviour indicates an age under 18, reducing sensitive or potentially harmful content (graphic violence, viral challenges, sexual or violent role-play, extreme beauty ideals) and offering parental controls and a study mode. Because there is no age check at sign-up, the system estimates age afterwards from conversation topics and times of use, and Barnevakten notes that such guesses can be wrong. An adult who wants out of teen mode can go through an age check run by the company Persona, which depending on the country asks for a real-time selfie and a government ID; Barnevakten questions whether that process is privacy-safe (Persona's terms mention retention of up to three years) and advises using only age checks one trusts. The account's own experience is limited to the unexpected switch and the verification route; no further consequence is described.

Core + contextual relations Low reported severity Media Coverage

AI involvement supported · Causal attribution supported · 1 source · Added 24/09/2026

Cases may have several effects and sources. Mixed accounts qualify when they include a reported harm or adverse experience. People are counted within individual cases where sources support a number; we do not publish a collection-wide total of distinct people.

A source’s existence, the experience it reports and AI’s causal role are separate questions. A lawsuit records allegations unless a subsequent finding establishes them.

Methodology and corrections · Subscribe via RSS · Suggest a case or correction · Find support

Last dataset update: 23/10/2026. Dataset available under CC BY 4.0.