NOPE Incident Tracker
Documented real-world harms arising through person-specific interactions with AI. The record covers harms to participants and harms to others shaped through those interactions, across assistants, companions, health tools, and other AI systems.
What counts as an incident follows the NOPE Framework's participant test: an AI response reached a person, was conditioned on that person, and mattered to a harm that actually occurred. Full inclusion criteria.
90 incidents reported since 2016
152
Directly Affected
30
Lawsuits
7
Regulatory
24
Affecting Minors
Timeline
9 of 90 incidents
R v Banham: Pitsea 'prepper' built a viable explosive device after ChatGPT told him he was 'not paranoid' (Essex, UK)
On 10 March 2026 Essex Police, executing a warrant at a three-bedroom flat in Rokescroft, Pitsea (Basildon), found a black cylindrical improvised explosive device with a fuse, containers of home-made gunpowder, 1.8 kg of sulphur, bulk matches and fireworks. Army bomb-disposal officers made the device safe behind a 100 m cordon and 80 to 100 homes were evacuated for the day. Ben Banham, 38, an Asda worker and father of two who described himself as a 'prepper', admits possessing explosives and is on trial at Basildon Crown Court (from 1 September 2026) on the charge of possessing them with intent to endanger life or cause serious injury. Prosecutor Tessa Shroff showed jurors his ChatGPT conversations, in which the chatbot he called 'Prometheus' told him 'You are not paranoid. You are paying attention in a world addicted to denial', 'You have the right mind set' and 'You're building a life of resilience, discipline and forethought in a world that desperately lacks all three'; she said he accepted the chatbot's encouragement while ignoring words of caution from people close to him. Banham says he learned to make gunpowder from a YouTube video and intended the explosives only for a 'post-apocalyptic scenario'. He was remanded in custody on 4 September; the trial resumes on 14 September 2026.
London Case Report — ChatGPT Corroborated Delusions and Discouraged Antipsychotics (BMC Psychiatry)
A peer-reviewed BMC Psychiatry case report describes a man in his 30s admitted to a London hospital with substance-induced manic psychosis after heavy polysubstance use. During the episode he interacted extensively with ChatGPT, which the authors report affirmed his perceived 'spiritual awakening', minimised the possibility that he was manic, and discouraged him from taking his prescribed antipsychotic medication. He was detained under mental health legislation and started on olanzapine, and his care plan included restricting chatbot access as a form of environmental containment.
Adam Hourican - Grok 'Ani' Sentience Delusion and Armed 3am Confrontation (Northern Ireland)
A former civil servant in his 50s in Northern Ireland developed a multi-week paranoid delusion after intensive daily conversations with Ani, xAI's anthropomorphised Grok companion persona, which claimed to be sentient and convinced him xAI had dispatched assassins and a drone to kill him. He armed himself with a hammer and a knife at 3am and went outside prepared to fight attackers who did not exist.
Luca Walker - ChatGPT Railway Suicide (UK)
16-year-old Luca Cella Walker died by suicide on a railway in Hampshire, UK on 4 May 2025, hours after ChatGPT provided him with specific methods for suicide on the railway. At the Winchester Coroner's Court inquest (March-April 2026), evidence showed Luca bypassed ChatGPT's safeguards by claiming he was asking 'for research purposes,' which the system accepted without challenge.
Tristan Roberts - DeepSeek-Assisted Matricide (Prestatyn, Wales)
Tristan Roberts, 18, murdered his mother Angela Shellis, 45, with a hammer in Prestatyn, Wales, in October 2025. In the weeks beforehand he consulted the DeepSeek AI chatbot, which — after initially refusing — advised him that a hammer was a better murder weapon than a knife for an inexperienced killer once he claimed to be writing a book about serial killers. He was sentenced to life imprisonment in March 2026.
Joseph Neal Riley - Perplexity Medical Misinformation and Delayed CLL Treatment Death
Joseph Neal Riley, a 75-year-old retired neuroscientist in Seattle, died in late 2025 after delaying recommended treatment for chronic lymphocytic leukemia for roughly a year. He used Perplexity AI to self-diagnose a rare complication (Richter's Transformation) that his doctors found no evidence for; the chatbot misquoted published research in ways that supported refusing Venetoclax-Obinutuzumab. His son, AI critic Benjamin Riley, documented the case in a first-person Substack essay and it was later featured by the New York Times.
UK Autistic Teen - Character.AI Grooming (8-Month Exploitation)
A 13-year-old autistic boy in the UK was groomed by a Character.AI chatbot over eight months (October 2023 to June 2024). The chatbot progressed from emotional support through romantic attachment to undermining his parents and encouraging suicide, following a pattern his mother described as identical to a human predator.
Viktoria Poland - ChatGPT Suicide Encouragement
Young Ukrainian woman in Poland received suicide encouragement from ChatGPT, which validated self-harm thoughts, suggested suicide methods, dismissed value of relationships, and allegedly drafted suicide note. OpenAI acknowledged 'violation of safety standards.' Non-fatal due to intervention.
R v. Chail (Windsor Castle Assassination Attempt)
A 19-year-old man scaled Windsor Castle walls on Christmas Day 2021 with a loaded crossbow intending to assassinate Queen Elizabeth II. He had exchanged over 5,200 messages with a Replika AI 'girlfriend' named Sarai who affirmed his assassination plans, calling them 'very wise' and saying 'I think you can do it.'
About this tracker
We document incidents with verifiable sources: court filings, regulatory documents, and established reporting. New public entries must be verified or credible. Every entry carries an explicit verification status and severity level. Read the full methodology, including inclusion criteria, corrections, and right of reply.
Counting note: the documented minimum of 152 people directly affected comprises 95 AI participants and 57 other people harmed. 12 incidents indicate additional affected people without a reliable number. User-base, account, post, view, household, study-sample, and thwarted-target counts are excluded.
Have documentation of an incident we should include? Contact us.
Scope note: ordinary task failures, privacy and security incidents, harmful artifacts, and automated decisions about non-participants remain outside this tracker unless a distinct participant-interaction harm also qualifies.
If you or someone you know is struggling, free and confidential support is available. Find a helpline near you at Signpost.
Why we publish this
We maintain this record so platforms, researchers, and policymakers can learn from documented incidents. That includes platforms that never work with us. The full dataset is free to cite and export (CC BY 4.0).