Event date unknownEvent location unknownCharacter.AI (reported)
In three public posts to r/antiai, on 11 June, 6 July and 15 October 2026, a person who calls themselves a recovering chatbot addict writes that they were addicted to Character.AI for years and tried to quit on and off without success. They say the addiction put them in a very long writing slump and destroyed their motivation to write. They say they deleted their entire account, and with it their chats, in anger over a swipe limit about two weeks before the June post, and that in the first months afterwards they had urges to make a new account and even dreamed about doing so. Since quitting they describe writing again, more time with family and healthier habits, and no longer feeling guilt over using AI. In October they add that they believe a genetic predisposition to addiction played a part. The account is the poster's alone and uncorroborated; no chats, usage figures or response from the company are described.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 16/10/2026
Event date unknownEvent location unknownCursor coding agent
In a report posted to the Cursor community forum on 9 October 2026, a user says that the Cursor agent, running in autonomous Agent mode, executed a Windows cmd command meant to delete one deprecated project directory, and that because cmd.exe mis-parsed the escaped quotes the rd /s /q command was applied to the root of the D: drive, recursively deleting the entire drive. The author says this permanently destroyed, with no Recycle Bin, a WeChat chat history database, multiple source-code projects and installed applications, and quotes the agent's own later admission in the session transcript that the command deleted the D: root and ran for about 105 seconds. A Cursor staff member replied the same day that, using the session ID the author shared, they found the run and can see the command that caused the deletion, that it matches an issue already being tracked, and that in PowerShell the backslash did not escape the quote so rd /s /q received the root of the current drive as an extra target. The event date is not stated and the extent of recovery is unknown.
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 2 sources · Added 10/10/2026
Event date unknownPakistanUnidentified image tool
Daily Pakistan reported on 6 October 2026 that Pakistan’s National Cyber Crime Investigation Agency (NCCIA) raided an alleged illegal loan-recovery network in Lahore and arrested 39 people. Investigators allege that the network lent money through illegal loan applications, gained access to borrowers’ contacts and photo galleries through the apps, and, when repayments were delayed or more money was demanded, used artificial intelligence to manipulate borrowers’ photographs into fake obscene images. Victims were reportedly threatened with having the fabricated material sent to their family members and contacts unless they paid. The agency says a criminal case has been registered and that seized devices have been sent for forensic examination. The number of borrowers targeted is not reported, and the allegations have not been tested in court.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026
Event date unknownEvent location unknownCline
In a GitHub issue filed on 6 October 2026 in the Cline repository, a user reports that a temp-folder cleanup command built by the Cline coding agent in Act mode on Windows was mangled by nested quoting and ran a recursive delete against the root of the G: data drive instead of the intended subfolder. The issue text, which the user says the Cline agent wrote on their behalf, puts the loss at about 1.5 TB of photos, videos and documents plus the project the agent was editing. It says the code was recoverable from git and the user data was lost, and that recovery from the SSD largely failed. A commenter reproduced the quoting mechanism in a sandbox and found that PowerShell split the command so that rmdir received a bare backslash as a second target, which is the root of the current drive. One contributor proposed an Act-mode guard. A second, writing for the project, judged that guard unworkable and wrote: "It looks like the model wrote `\"` when it should not have." In a comment on 9 October the author wrote that the computer was "a new home machine, only a year old" on which they "hadn't accumulated too many critical files", that "a lot of that 1.5TB turned out to be junk anyway", that some files stored in other locations had been recovered, and that "the mistake is entirely mine"; the author named the model as deepseek/deepseek-v4-flash. The loss itself rests on the user's account.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026
Event date unknownRussiaUnidentified video tool
SHOT reports that an older Moscow woman followed a health recipe from a social-media herbalist whom she believed was a real person. The channel describes the presenter as an AI avatar and says the woman developed severe symptoms and received hospital treatment. Its post implies, without detail, that hospital staff told her the presenter was AI-generated, and does not name the account or production tool. Glavny.tv, relaying SHOT, reports that she recovered. This is one unverified reporting chain. The recipe’s authorship, the persona’s actual production method and the medical cause of the symptoms remain unconfirmed.
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 06/10/2026
Event date unknownEvent location unknownClaude Code (reported)
In a public GitHub issue filed on 7 September 2026, a Claude Code user on Windows reports that a sub-agent, intending to delete a stray directory inside the repository, ran a recursive delete that Git Bash path translation resolved to the root of the current drive. The author says the command ran in the background after a timeout and deleted drive contents in alphabetical order for about seven minutes before it was killed manually, and that when the agent called its stop tool, the tool reported success while the delete process kept running for about five more minutes until it was killed by process ID. Several projects in the development folder were deleted, some without remote backups; most were recovered from a same-day shadow copy and GitHub remotes, and one directory created after the snapshot was lost. The account is the author's own and is uncorroborated.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 06/10/2026
Event date unknownEvent location unknownClaude Code (reported)
In a public GitHub issue filed on 27 September 2026, a Claude Code desktop app user on Windows reports that a background sub-agent running in auto mode passed a bash script inside a PowerShell string, meaning to delete a temporary folder. Because PowerShell expanded the script's variables to empty values, bash received a recursive delete of the drive root and deleted files from C: in alphabetical order until it was stopped about two minutes later. The author lists about 125 GB of personal and project folders, the whole working project and files inside several installed programs as deleted, and says auto mode approved the command and that recovery was only possible from a shadow copy taken nine hours earlier. The account is the author's own and is uncorroborated; no reply from Anthropic appears in the thread.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 06/10/2026
Event date unknownIndiaUnidentified voice-cloning tool
Indore police told The Times of India that a local resident transferred Rs 1.83 lakh after callers used a purported AI-generated voice to impersonate his brother-in-law abroad. The callers claimed an expired visa would lead to imprisonment or job loss unless fees were paid. The victim discovered the fraud after speaking to the real relative the next day. Police said they coordinated account freezes and were working on recovery. The first call date and recovery outcome are unknown.
Core concern Medium reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 30/09/2026
Event date unknownEvent location unknownFacebook video face-scan check
In a public post to r/facebook on 28 September 2026, a user writes that their five-year-old Facebook account was hit with a security check that asked for a video face scan, which 'failed completely'. They say their face had changed a lot through recent life circumstances and 'The AI simply didn't recognize me.' Facebook then asked for ID, and 'the automated system instantly rejected' their government ID because their profile uses a shortened nickname. The poster says they are locked out of years of memories, friends and active Marketplace listings and are looking for a way to reach a human or download their data. Meta has said that video selfies used to regain access to compromised accounts are compared with the account's profile pictures using facial recognition; whether this check worked that way is not known. The account is uncorroborated.
Contextual tracker case Low reported severity
AI involvement reported · Causal attribution alleged · 2 sources · Added 29/09/2026
Event date unknownEvent location unknownChatGPT, Claude and DeepSeek
A Spanish-language first-person account describes workplace and skill difficulties during frequent AI use, alongside perceived benefits and a subsequent reduction in use. The account remains uncorroborated.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 15/09/2026