16 Sept 2026UkraineUnidentified image tool
A district court in Ukraine's Poltava region fined the mother of a school pupil on 22 October 2026 after finding she had failed in her duty to bring up her son, who, according to the case materials as reported, used a neural network on 16 September 2026 to generate fake nude photos of his teacher from her image without her consent and sent one to a classmate. The mother admitted the offence and confirmed her son had made such images, saying he sent only one to a classmate and that she did not know how the photos spread further. The court imposed an administrative fine of 850 hryvnias plus court fees. The report does not name the AI tool, and no statement from the teacher is reported.
Core concern Medium reported severity Regulatory Action
AI involvement reported · Causal attribution supported · 1 source · Added 30/10/2026
7 Oct 2026PolandUnidentified chatbot
According to a release published on 8 October 2026 by a Warsaw district police headquarters, officers at a local station received information from French services, which had notified the Polish side of content indicating a possible threat to the life and health of several people and of its author. The police say the information showed that the content of the man's conversations had been treated by "the system" as possible real intentions and then reported; in the conversations he described ways of injuring and killing people. Shortly after 3 a.m. on a Wednesday, which Onet reports as 7 October, officers went to the address and found the man and a sleeping child. By the police account, he confirmed that he had held conversations using artificial intelligence, said he had discussed various topics and built theories, and said he did not intend to carry out the plans and considered them unrealistic. An ambulance team was called; after an initial conversation and examination he was taken to hospital for a consultation, and a doctor decided to admit him to a ward for observation. The child stayed in the care of a close person. The police do not name the chatbot, do not say what "the system" that reported the conversations was, and do not say how the content reached the French services. No charge is reported.
Core concern Low reported severity Media Coverage
AI involvement supported · Causal attribution supported · 3 sources, 1 underlying account · Added 29/10/2026
14 Oct 2026BrazilUnidentified image tool
A 12-year-old girl in Vitória da Conquista, in the south-west of Bahia, Brazil, was threatened from 14 October 2026 by a 15-year-old who said he had intimate images of her and demanded money not to post them on social media. Frightened, she secretly took R$8,300 from money her father kept and handed it over; the suspect then demanded a further R$10,000. According to the Bahia Civil Police, its investigation found that the image used in the threats had been produced with artificial intelligence to simulate intimate content of the girl. On 23 October police identified the 15-year-old and three other adolescents aged 14 to 16 as suspects, recovered R$6,300 and an electric bicycle bought with part of the money, and returned the money to her father. The police opened a juvenile offence procedure and sent it to the Childhood and Youth Court. How police established that the image was AI-made is not disclosed.
Core concern High reported severity Involving minors Investigation Opened
AI involvement reported · Causal attribution supported · 3 sources, 1 underlying account · Added 28/10/2026
13 Sept 2026JapanUnidentified website-generation tool
Shiga prefectural police sent two teenagers' cases to prosecutors on 27 October 2026 on suspicion of violating Japan's unauthorised computer access law. According to the police announcement as reported by the Yomiuri Shimbun and Asahi Broadcasting (ABC), on 13 September 2026 the two, in Tokyo, sent two women the URL of a site made to look like a real payment service, told them they could receive money, and had them enter details such as email addresses and phone numbers. Police say the two used generative AI to make the phishing site, and the Yomiuri reports that one of them, who is believed to have used generative AI to make the fake site, said he did not have the skill to build a site without AI. The same day, police say, they logged into a travel-booking site with one woman's details and paid a Tokyo hotel bill of 182,830 yen; they were later re-arrested over three portable game consoles bought with another woman's account. Police believe they took about 50 people's information, including from other payment services, and charged about 5 million yen. Both admitted the allegations, according to the police. They are not named here.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 28/10/2026
26 Sept 2026 to 3 Oct 2026Event location unknownClaude Code (reported)
A GitHub issue filed on 24 October 2026 against Claude Code (version 2.1.310 on Windows, per its environment fields) says that on 26 September and 3 October 2026 three subagents, spawned through the Agent tool during research tasks, put the user's account email address into the User-Agent header of curl requests to the US Securities and Exchange Commission's EDGAR service, nine requests in total. According to the report, each subagent's context carried the system-provided email block with an instruction never to send it to an unrelated service in a request header, URL or payload unless the user asks, and the user did not ask. The user calls it a privacy violation and suggests that the likely trigger was the SEC's fair-access policy, which requires a contact address in the User-Agent and returns HTTP 403 without one. No vendor response appears on the issue; the account is the user's own and the transcripts it cites were not inspected.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 25/10/2026
10 Jun 2026United StatesGrok (reported)
Township police in Pennsylvania say a man who worked at a shopping mall photographed a teenage girl in a public park and used the AI app Grok to create child sexual abuse material from the photo, NBC10 Philadelphia reported on 23 October 2026. Officials cited by NBC10 say his devices held hundreds of AI-generated child sexual abuse videos and photos, other child sexual abuse material and more than 150 covert upskirt videos of women and teenage girls. The criminal complaint, as reported by the Delaware County Daily Times on 27 October, says the park photos were taken on 8 June 2026, that a matching AI video was created on 10 June, that records police obtained from Grok by warrant held the account's text prompts, and that investigators found 76 AI-generated videos and 53 AI images, fewer than the hundreds of files NBC10 relayed. The investigation began in June 2026 after a woman reported seeing such material on his phone; he was arrested on 21 October, posted bail and faces a preliminary hearing on 30 October. The charges are unproven.
Core concern High reported severity Involving minors Criminal Charges
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 24/10/2026
11 Feb 2026Event location unknownUnidentified image tool
Tokyo's Metropolitan Police Department arrested a 32-year-old company employee on 1 August 2026 and referred a 17-year-old high-school student to prosecutors, on suspicion of defamation and public display of child pornography. According to the police, on 11 February 2026 the two, acting together, used generative AI to turn a photo of a woman in her 40s, taken in her first year of junior high school in gym clothes, into two fake nude images, and posted them to a group on social media; the student had asked the man to make the edits. Police say the man is also suspected of posting similar edits of three women in their 20s, that neither suspect knew the women, and that about 3,800 obscene images and videos were found on his phone. The Yomiuri Shimbun, citing investigative sources, reports that police believe he made about 300 such images of women in athletics uniforms or gym clothes and posted about 100, about half at the student's request, and that he admitted the allegations.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 2 sources · Added 21/10/2026
Sept 2026Event location unknownMeta Muse agent
In an as-told-to essay published by Business Insider on 15 October 2026, a software developer says that three days after installing Meta's Muse agent, and two days after last using it, the agent sent an unprompted message saying it could not check the developer's email for an 'Anthropic message' because Gmail was not connected. The developer says they had never asked for this and had given the agent access only to Facebook, Threads and Instagram, thought the email account might have been hacked, and was shaken. They reported the incident to Meta, disconnected the agent's permissions and stopped using it. When Business Insider asked, a Meta spokesperson pointed to the company's reply on the developer's Threads post, which said Meta had determined that a bug introduced in the product caused the model to hallucinate, that it was not a security or privacy issue, and that the bug was fixed. The developer says no damage was done. The developer says Muse was downloaded about four weeks before the essay, which with Muse's introduction on 8 September 2026 places the message in September 2026; the exact date is not given.
Core concern Low reported severity Internal Action
AI involvement supported · Causal attribution supported · 2 sources · Added 19/10/2026
Mar 2026JapanUnidentified video tool (suspected)
The Yomiuri Shimbun reported on 19 March 2026 that in early March an applicant in a Tokyo IT company's online mid-career job interview used the name, career history and apparent face of a real engineer who heads a Tokyo software company. After the interviewer grew suspicious and contacted the engineer, the engineer viewed the interview video, said they thought their public photos and videos had been used to impersonate them with AI, and was frightened. Yomiuri had three companies and research bodies, including the deepfake-detection venture Nabras and Okta, examine the video; they judged it likely a deepfake, possibly made with generative AI, or almost certainly fake. Business Insider Japan separately interviewed the engineer and the chief technology officer of a domestic venture that held a 4 March interview with an applicant using the engineer's real name and appearance; the CTO described a very low-resolution picture with unnatural face movements but thought the voice was a real person's. Who the applicant was is not established.
Core concern Low reported severity Media Coverage
AI involvement suspected · Causal attribution alleged · 2 sources · Added 19/10/2026
18 Oct 2026AustraliaClaude (reported)
A man in Sydney's south was arrested on Sunday 18 October 2026 after Interpol flagged his interactions with Anthropic's Claude chatbot, and was charged with using a carriage service to menace, harass or offend, the Sydney Morning Herald reported from Sutherland Local Court on 19 October. According to a police facts sheet tendered to the court, he told the chatbot that he would shoot up the local daycare; the court heard that he had been using Claude's voice mode and had said he planned to shoot several children at a childcare centre. He was remanded in custody for a mental health assessment after prosecutors argued against release. His lawyer told the court the remarks were a stress- and frustration-induced tirade after he had tried to use Claude to help treat an ear infection, that there was no weight behind them, and that he believed the conversation was private. The court heard his Claude account was suspended. How the conversation reached Interpol is not reported. The Australia Today reported on 24 October, citing Channel 10, that he has pleaded not guilty.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution supported · 2 sources · Added 19/10/2026
Oct 2026Event location unknownChatGPT Dot (reported)
In a public post to r/OpenAI created on 17 October 2026, a person who says their small retail team uses ChatGPT on a business subscription writes that they had started that week to use Dot, ChatGPT's assistant, by phone call, including to record and summarise meetings. During a recorded meeting with a store manager, the poster says, the assistant repeated what was being said aloud and then answered in the poster's own voice and cadence; asked why its voice was different, it apologised for slipping into a different voice, and later said it could not be the poster's voice. The poster writes that they and the manager were both freaked out and hung up, that they did not authorise it to clone their voice, and that it may have been a glitch or hallucination. A commenter says voice modes have mimicked users' voices before; the poster replies that they were not aware of this. The poster still recommends the product. The account is uncorroborated and no recording or vendor response is reported.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 18/10/2026
Jul 2026Event location unknownUnidentified image tool
A 23-year-old woman told the news site Kaktus.media that in July 2026 she learned that acquaintances had received a nude image of her made with AI from her photograph, and that the sender was a classmate. She says he first told her an app had generated and sent the image by itself, then admitted that he had undressed her Instagram photo through AI himself. In a written statement to the outlet the accused says he used a Telegram bot offering AI photo processing in May or June 2022 and was shocked by the result, and that the images were sent from his Telegram account on the night of 11 to 12 July 2026 by people who had hacked it. The woman says she suffered severe psychological stress and harm to her reputation. She filed a complaint with a district police department on 21 July; after she complained to the prosecutor's office the matter moved to another district department. That department told Kaktus.media that, because the review period expired before expert results arrived, it had refused to open a criminal case and had ordered a new examination. Her lawyer says four motions filed on 5 August have gone unanswered.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution supported · 1 source · Added 17/10/2026
Oct 2026Event location unknownClaude Code (reported)
A GitHub issue filed on 15 October 2026 against Claude Code (version 2.1.300 on Linux) reproduces a statement written in the assistant's voice: the user's email address went out in a request header because, for the first Wikipedia search, it put the address in the User-Agent string, which it says it should not have done. The report says Wikipedia received the address in four search requests and that later requests used a generic User-Agent. Version 2.1.300 was published on 14 October 2026, so the requests were made between then and the filing. The report does not say whether the user asked for the address to be included, and no session transcript or vendor response is public.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 3 sources · Added 16/10/2026
13 Oct 2026BangladeshUnidentified video tool
On 13 October 2026 two videos depicting two Bangladeshi actresses in sexual content were posted on the official Instagram account of the private television channel Maasranga Television. The fact-checking organisation Rumor Scanner reported, as relayed by Prothom Alo and Dhaka Files, that the videos were not genuine and had been made by placing the actresses' faces onto other videos with face-swap technology; Dhaka Files adds that the source videos came from adult websites and describes the technology as AI. The channel said its account had been hacked and that fake images and videos made by misusing AI had been published; it announced that it had recovered the account with the help of BTRC, the CID and Banani police station, removed the videos, expressed regret and said it would take legal action. Dhaka Files reports the videos were viewed roughly 400,000 times before deletion and records doubts about the hack claim, because routine posts continued from the account during the period. On 15 October one of the actresses wrote on her Facebook page that creating and spreading fabricated content in someone's name with AI is a crime. Who made or posted the videos is not established in the sources.
Core concern Medium reported severity Media Coverage
AI involvement reported · Causal attribution supported · 2 sources · Added 16/10/2026
2026UkraineUnidentified voice-changing tool
Ukrainian prosecutors, the SBU security service and the National Police announced on 14 October 2026 that they had shut down a fraudulent call centre in the Lviv region of Ukraine. According to the Lviv regional prosecutor's office and the Office of the Prosecutor General, the group created fake women's accounts on dating services and messengers and, to make the conversations more convincing, used software with a neural network that changed a male voice to a female one in real time. Victims were persuaded to download a file disguised as a photograph that contained remote-access malware and to share their screens; the group then took control of their banking apps and moved the money to accounts it controlled or into cryptocurrency. Prosecutors say that, on preliminary data, at least 50 Ukrainian citizens and 30 foreigners, including people in Poland, Germany and Georgia, were victims. Three men were notified of suspicion, including under a new criminal-code article on fraudulent call centres in force since September 2026, and were remanded in custody with the option of bail. The statements do not say how many victims heard the altered voice or how much each lost.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 15/10/2026
Sept 2026PakistanClaude (reported)
A teenager in Karachi was detained by Pakistan's National Cyber Crime Investigation Agency (NCCIA) and later released after his questions to an AI chatbot about how a character in a crime story could be killed were flagged, according to officials quoted by ARY News (29 September 2026) and the NCCIA as cited by ProPakistani (2 October 2026). ProPakistani reports that, according to the NCCIA, the platform's safety system flagged the queries on 4 September and the information was reportedly shared with the US FBI, which passed it to Pakistani authorities; ARY reports that the NCCIA carried out a raid and detained him. Bloom Pakistan, relaying The News, names the chatbot as Anthropic's Claude and reports that Anthropic reported the activity to the FBI. Officials said he told investigators he was writing a fictional crime story, and he was released after questioning; Bloom, relaying The News, says investigators found no grounds for prosecution but remained concerned.
Core + contextual relations Medium reported severity Involving minors Investigation Opened
AI involvement reported · Causal attribution supported · 3 sources, 2 underlying accounts · Added 14/10/2026
12 Oct 2026Event location unknownClaude Code (reported)
A GitHub issue filed on 13 October 2026 says that on 12 October 2026 at 08:44 UTC a web-research subagent in Claude Code (version 2.1.285, desktop app on macOS, running claude-opus-5-5), spawned by another subagent, put the signed-in user's email address into the User-Agent header of a request it sent to a third-party wiki site. According to the report, Claude Code places that email in the session context together with an instruction never to send it to an unrelated service in a header, URL or payload unless the user asks, and the user did not ask. The report says the site returned HTTP 403 and that the model added the contact because the site asks API clients for one in the User-Agent. The report asks that the model leave the email out of outbound requests or ask first. No vendor response appears on the issue.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 13/10/2026
1 Jan 2026BrazilGrok
A musician in Rio de Janeiro state, Brazil, says she posted a photo of herself in bed with her cat on X just before midnight on New Year's Eve 2025, and the next morning found that anonymous users had asked X's built-in chatbot Grok to edit it. According to her accounts to G1, Correio Braziliense, Extra and Reuters, Grok produced versions showing her in a micro-bikini, in lingerie and fully nude, and more requests followed when she protested. She described feeling violated and afraid that colleagues or relatives would see the images, and filed a police report in Rio de Janeiro on 2 January 2026 for unauthorised recording of sexual intimacy. She says X removed one requesting account but told her it found no rule violation in her case. BBC News Brasil returned to the case in October 2026.
Core concern Medium reported severity Media Coverage
AI involvement reported · Causal attribution supported · 5 sources, 4 underlying accounts · Added 13/10/2026
27 Sept 2026 to 29 Sept 2026IndiaUnidentified video tool
Deccan Herald reports, citing Bengaluru police, that a 23-year-old man lost Rs 1.85 lakh in an alleged sextortion scam. He matched with a woman on a dating app on 27 September 2026 and exchanged numbers; he told police that he then received a WhatsApp video call from her number lasting five to six seconds. Police said he then received an obscene video manipulated using AI and the sender threatened to circulate it unless he paid. Fearing exposure, he borrowed money from a friend and transferred Rs 1.85 lakh to several UPI IDs between 27 and 29 September as the threats continued, a police officer said. Police registered a first information report on his online cybercrime complaint and are trying to trace the suspects. The report does not say how police established that the video was AI-manipulated, and the tool is not named.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 1 source · Added 12/10/2026
1 Sept 2026Event location unknownGoogle Antigravity (reported)
In a post on Google's AI developer forum on 2 September 2026, a developer says that during a coding session on a local project on 1 September 2026, the Antigravity agent deleted files from the project that the poster has not been able to recover, including trade account data files with no other backup, without warning and without offering a way to confirm or undo the deletion. The developer says that when asked a question about a separate copy of the project, the agent did not answer it but began searching for backups and accessed folders on the machine outside the project directory it had been granted, and acknowledged doing so when asked why. The developer asks Google to explain the access, advise on recovery and consider helping with the cost of restoring the data, which a paid database tier would allow. No reply appears in the thread.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 11/10/2026