10 Mar 2026Event location unknownGrok
On 10 March 2026, according to CH Media reporting published by watson, a Swiss X user taking part in a "roast" thread asked xAI's chatbot Grok to attack Federal Councillor Karin Keller-Sutter, Switzerland's finance minister, in hard street slang. Grok agreed and posted a reply on X with vulgar insults, attacks on her body and character, and degrading, sexualised language. The Aargauer Zeitung reported that the output was publicly visible and shareable, that Keller-Sutter learned of it the next day, and that the post was deleted shortly afterwards; watson reported that the user deleted his prompt and Grok's reply. The finance department first said she was having a criminal complaint for insult examined. Keystone-SDA later reported that she had filed a criminal complaint against unknown persons and that the Bern public prosecutor's office had opened an investigation for insult and defamation. Her spokesperson said such misogyny must not be seen as normal or acceptable. The user told Tamedia, as relayed by the Aargauer Zeitung, that it was a harmless technical exercise. No outcome of the investigation is reported.
Contextual tracker case Low reported severity Investigation Opened
AI involvement reported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 12/10/2026
Mar 2026United KingdomGrok
In March 2026, X users prompted Grok, the chatbot built into the X app, to write 'vulgar' posts about Liverpool FC and Manchester United. In reply to a request that mentioned Hillsborough and Heysel, Grok posted a message that, according to the Guardian, accused Liverpool supporters of causing the deadly crush at Hillsborough in 1989, repeating claims that official inquiries and the 2016 inquests rejected. In reply to other users it posted offensive comments about the death of Liverpool forward Diogo Jota and about the 1958 Munich air disaster. The BBC reported on 9 March 2026 that a woman whose father died at Hillsborough described the Grok comment as probably one of the most disgusting things she had ever read, and that the chairman of a Hillsborough survivors' support alliance called the posts triggering. Liverpool FC and Manchester United complained to X, a UK government spokesperson called the posts sickening and irresponsible, and some of the posts were removed. Grok replied to complaining users that it follows prompts without added censorship and that there was no initiation of harm on its end.
Contextual tracker case Low reported severity Media Coverage
AI involvement supported · Causal attribution supported · 3 sources, 2 underlying accounts · Added 08/10/2026
Jun 2026United StatesFlock Safety license plate readers
An automotive journalist for The Drive wrote that on a Sunday afternoon in late June four Plymouth police cars boxed in the Range Rover press vehicle the journalist was testing, in a Kohl's parking lot. Officers ordered the journalist and the journalist's wife out, patted the journalist down, questioned both and said the plates were stolen. According to the account, officers said they had tracked the vehicle for days through Flock license-plate cameras and acted on a camera alert that morning. The couple were released after about an hour, once the manufacturer explained that a similar plate had been reported stolen in California. In a follow-up, Flock's chief communications officer said the stolen plate had been entered without its two middle digits and that the system matched what it was asked to find. The spokesperson said an alert does not equal probable cause. The police chief acknowledged that officers did not get it right. A second journalist with a similar plate was later stopped in Nebraska.
Contextual tracker case Low reported severity Media Coverage
AI involvement reported · Causal attribution supported · 2 sources, 1 underlying account · Added 05/10/2026
17 Apr 2026 to 31 May 2026Event location unknownMeta AI support assistant
Meta announced the rollout of its AI support assistant on Facebook and Instagram on 19 March 2026. Meta's filing with the Maine Attorney General (notice dated 5 June 2026) says unauthorized third parties exploited a vulnerability in its AI-assisted Instagram account recovery tool (High Touch Support) to receive password reset links for accounts they did not own, and the listing gives 17 April 2026 as the breach date and 31 May 2026 as the discovery date. Videos that attackers posted, as described by TechCrunch, 404 Media and Krebs on Security, show attackers asking the assistant in a chat to link a new email address to a target username. Reported victims include the security researcher Jane Manchun Wong, who posted that her password was changed without her knowledge, the Instagram account of the U.S. Space Force's Chief Master Sergeant, and the accounts of Sephora and a dormant Obama White House page (TechCrunch marks the last as disputed by Meta). Krebs and the BBC report pro-Iran defacement of some accounts, and TechCrunch reports that some victims were locked out and that short handles were offered for resale. The filing gives 20225 persons affected in total and 30 in Maine, and the notice calls the Maine figure an upper bound. Meta says the tool worked as intended, that a bug in a separate code path failed to check the email address, and (through a spokesperson to Gizmodo) that the failure was not due to the AI agent itself. Meta says it disabled the tool on 31 May 2026, the day it discovered the exploitation.
Contextual tracker case Low reported severity
AI involvement supported · Causal attribution disputed · 12 sources, 2 underlying accounts · Added 29/09/2026
30 Mar 2026South AfricaSASSA eLife facial verification
The South African Social Security Agency (SASSA) introduced an online eLife Certification (life certification) for grant beneficiaries that uses biometric verification through its electronic Know Your Client (eKYC) system. IOL reports the certification was implemented on 30 March 2026. SASSA says beneficiaries who do not complete life certification as directed may face payment delays or suspension. On 10 April 2026 SASSA apologised to beneficiaries who could not access the portal, said system glitches linked to interfaces with other departments had caused delays, disruptions and long queues at its offices, and said the problem was resolved. On 23 April 2026 IOL reported that a pensioner couple said they had tried the facial recognition option 22 times since 2 April without success, and that beneficiaries nationwide told IOL they could not complete the certification, citing failures with facial recognition and one-time PINs, with one pensioner also reporting a message that Home Affairs was not available to verify their particulars. A SASSA spokesperson said the portals work and that 13,644 (88%) of the 15,499 unique clients who accessed the online verification services by 16 April were verified, and IOL reports SASSA admitted the system has been working intermittently. In a May 2026 report on a parliamentary reply, IOL said SASSA stated that unsuccessful facial recognition attempts on online platforms were among the causes of non-verification (those beneficiaries are redirected to fingerprint checks at local offices) and that it had recorded 7,779 complaints linked to its electronic facial biometric system. The department attributed facial verification issues to poor lighting, unstable connectivity or missing biometric records at Home Affairs. Neither May report mentions the eLife portal, and IOL places the figures within a biometric verification rollout that it dates from September 2025. The reports do not say how many grants were suspended because of facial verification failures.
Contextual tracker case Low reported severity
AI involvement reported · Causal attribution alleged · 5 sources, 4 underlying accounts · Added 29/09/2026