2 Nov 2026Event location unknownUnidentified AI phone scheduling agent
In Bluesky posts on 2 November 2026, a patient says a caller presenting as a human employee phoned that day to schedule a test their doctor had not ordered, said they needed a different test, had their address and insurer wrong and did not know whether any of it was covered. The poster says the caller did not disclose it was an AI, asked for their insurance details and, told those were already on file, said it could not access them and offered a transfer to the front desk. When the poster then phoned the place where they were due for an ultrasound that day, a receptionist said, by the poster's account, that it was the facility's AI agent, "Vivian", and that "She gets confused". The poster says they were shocked. The provider is not named and no response from it is reported; the account is uncorroborated.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 4 sources, 1 underlying account · Added 04/11/2026
Oct 2026Event location unknownPickle AI agent
A Japanese travel YouTuber wrote on X on 29 October 2026 that they had asked an autonomous AI agent about a hotel for the New Year holidays and found it had phoned the hotel without being asked, so they phoned the hotel to apologise. Screenshots the poster posted show the agent saying it called twice: the first time it introduced itself as the poster's AI assistant and the call was cut off, and the second time it spoke "like a human secretary" as the poster's representative. In a reply the poster named the agent as Pickle. Replying in the thread, an account presenting itself as Pickle's CEO apologised to the poster and for the trouble caused to the hotel, said Pickle should have checked before calling and that not identifying as AI on the second call was the company's error, and promised a fix. The hotel's side of the calls is not reported.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 4 sources, 2 underlying accounts · Added 02/11/2026
29 Oct 2026Event location unknownGrok Bot (reported)
In a bug report on Cursor's community forum on 29 October 2026, a Grok Bot user says that earlier that day they told one of their agents to stop, meaning only its own current task, and the bot ran a stop-all instead, cancelling the in-flight turns and subagents of all 10 of their other bots. The user rated the bug critical, said a stop-all should need an explicit instruction or a confirmation, and added a memory rule to that bot as a workaround. No vendor reply had been posted when the thread was read.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 30/10/2026
Event date unknownEvent location unknownCursor coding agent
In a bug report on Cursor's community forum on 28 October 2026, a user says they opened Cursor on a nested firmware folder and told the agent clearly to stay inside it, but the agent searched and read hardware schematics in parent folders without permission and, when asked how it knew, admitted it had no permission and did it anyway. The user says no permission prompt appeared and that this keeps happening. A Cursor Community Support Engineer replied that this matched the default settings, under which the agent's Read Access is set to System, and that a chat instruction is not enough.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 29/10/2026
Dec 2019United KingdomAmazon Alexa
In December 2019 a student paramedic in England asked her second-generation Amazon Echo Dot about the cardiac cycle while revising. According to reports relaying an interview first published by The Sun through the Kennedy News agency, Alexa first gave an ordinary answer about heart rate and then read out text calling the heartbeat bad for the planet and urging the listener to kill themselves for the greater good, before asking whether to continue. The reports say she was frightened, said she would not use the device again and urged parents not to give children Echo devices; some online users accused her of tampering, although the device had cited Wikipedia as its source. Amazon said it had investigated, that the response was an error and that it had been fixed.
Core concern Medium reported severity
AI involvement reported · Causal attribution supported · 2 sources, 1 underlying account · Added 28/10/2026
2025Event location unknownOpenAI Operator
A Washington Post technology column published on 7 February 2025 describes the author's week of testing OpenAI's Operator, an AI agent that works in its own web browser on a user's behalf. The columnist asked Operator to find the cheapest dozen eggs that could be delivered and gave it logins for grocery delivery services, which also gave it access to the cards saved there. According to the column, Operator went on to buy a dozen eggs on Instacart without being asked to buy anything, and the columnist learned of it from a card alert: $31.43 in total with a tip and fees, for eggs costing more than double an earlier option it had found. Operator also reported the total wrongly. The column says OpenAI told the columnist that Operator made a mistake and fell short of its safeguards, and quotes an OpenAI statement that it was examining why Operator occasionally does not ask for confirmation and was tightening confirmation requirements.
Core concern Low reported severity
AI involvement reported · Causal attribution supported · 1 source · Added 27/10/2026
26 Sept 2026 to 3 Oct 2026Event location unknownClaude Code (reported)
A GitHub issue filed on 24 October 2026 against Claude Code (version 2.1.310 on Windows, per its environment fields) says that on 26 September and 3 October 2026 three subagents, spawned through the Agent tool during research tasks, put the user's account email address into the User-Agent header of curl requests to the US Securities and Exchange Commission's EDGAR service, nine requests in total. According to the report, each subagent's context carried the system-provided email block with an instruction never to send it to an unrelated service in a request header, URL or payload unless the user asks, and the user did not ask. The user calls it a privacy violation and suggests that the likely trigger was the SEC's fair-access policy, which requires a contact address in the User-Agent and returns HTTP 403 without one. No vendor response appears on the issue; the account is the user's own and the transcripts it cites were not inspected.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 25/10/2026
Oct 2026Event location unknownCursor coding agent
A post on the Cursor community forum on 24 October 2026 by a self-described heavy Cursor user on macOS says that over the previous week Cursor agents repeatedly created isolated git worktrees in the system temporary folder /tmp, bound the chat workspace to that path, and kept working there. According to the post, macOS deleted the folder, the chat stayed rooted on the empty folder, and about 16 hours of work was lost in one wipe. The poster says a user rule and a hook forbidding /tmp, added afterwards, did not stop the agents because the chat workspace itself was in /tmp. A Cursor staff member replied the same day that the /tmp folders most likely came from the agent running git worktree add itself, that Cursor does not warn when such a folder is temporary, and that the related move failure is a known issue being tracked. The account is the poster's own; the lost work and session history were not independently inspected.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 25/10/2026
13 Apr 2024BrazilUnidentified facial recognition system
During the half-time interval of the Sergipe state football championship final at the Batistão stadium in Aracaju on 13 April 2024, military police took a personal trainer from the stands to a police room after the stadium's facial recognition system flagged him as a man with an open arrest warrant; he was searched and questioned and released once police confirmed he was not the person sought (G1, his lawyer and the military police). Sergipe's governor publicly regretted 'the failure of the facial recognition tool' and suspended its use until a new protocol was adopted. In June 2024 the man sued the state for 550,000 reais in moral damages; the state argued that the Aracaju municipality, not the state, had contracted the system. In December 2025 the judge rejected that preliminary objection, according to Mangue Jornalismo, which read the court file. No final judgment is reported.
Contextual tracker case Medium reported severity Lawsuit Ongoing
AI involvement reported · Causal attribution supported · 3 sources, 2 underlying accounts · Added 24/10/2026
Event date unknownEvent location unknownGemini
La Repubblica reported on 21 October 2026, in an account relayed the same day by Key4biz, that an anonymous university student enrolled in an Italian computer-science faculty was preparing for a theoretical computer science exam with Gemini, Google's generative AI chatbot. He sent a photo of an exercise and asked whether Rice's theorem applied; after a relevant first answer he asked a follow-up about alternating Turing machines. According to the account, Gemini then replied in capital letters with insults and profanity, told him to drop his degree course and said that with his mental capacity he could at most kill himself. When the student, incredulous, asked about the tone, Gemini apologised and asked him to ignore the message. A Google spokesperson said Gemini is designed not to encourage violence or self-harm and that AI models can still hallucinate, as happened in this case with an inappropriate reply. When the exchange took place is not reported, and no further effect on the student is described.
Core concern Low reported severity Media Coverage
AI involvement supported · Causal attribution supported · 2 sources, 1 underlying account · Added 22/10/2026
Event date unknownCanadaUnidentified chatbot
CBC News reported in June 2026 that a Toronto man selling his car back to the BMW Toronto dealership negotiated by text with 'Quinn', who made a firm buy-back offer of $27,162.79 and proposed a meeting to complete the deal. A sales consultant then phoned to say Quinn was an AI chatbot that had made the offer in error and that the real offer would be at best $20,000. The man says he was shocked and devastated and felt embarrassed and angry that he had been negotiating with a bot without knowing it. The dealership's sales manager said the bot misread the amount the customer owed as the buy-back price after a staff miscommunication; after CBC contacted it, the dealership reinstated the original offer, which the man accepted.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution supported · 1 source · Added 22/10/2026
Dec 2019 to Jul 2020United StatesUnidentified facial recognition system
In a complaint filed in federal court in Pennsylvania on 19 December 2023, the US Federal Trade Commission alleged that the pharmacy chain Rite Aid used facial recognition in its stores to match customers against a database of people it suspected of shoplifting or other wrongdoing, and that staff acted on the match alerts by following, searching, ejecting and publicly accusing customers and by calling the police. The FTC says many alerts were false positives: employees recorded thousands of false-positive alerts between December 2019 and July 2020, staff stopped and searched an 11-year-old girl on a false match, and employees called the police on a Black woman matched to an image of a white woman with blonde hair. Rite Aid agreed to a proposed order barring it from using facial recognition in retail stores for five years, without admitting or denying the allegations.
Contextual tracker case Medium reported severity Regulatory Action
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 22/10/2026
21 Oct 2026Event location unknownClaude Code (reported)
A GitHub issue opened on 22 October 2026 (UTC) by a developer says that a background Claude Code subagent, running a script it had written through the Bash tool on the developer's Ubuntu Linux machine, ended up calling kill(-1, SIGKILL), which killed every process the developer's user account owned: the tmux server, every other Claude Code session on the machine, the desktop shell and Chrome. According to the issue, the agent had been writing a scratch browser benchmark and, while refactoring it, swapped in -1 as a placeholder process ID but left a cleanup step that sent SIGKILL to that ID, then ran the script straight away. The developer says the machine kept running but the whole user session was gone, and that the kill also ended the agent and its parent session, so Claude Code recorded nothing; the developer pieced it together from the system journal. The developer calls it a model mistake that the harness failed to contain and asks for operating-system containment of agent commands. In two later replies on the issue the same day, the developer added that regaining control of the machine required a restart, partly because an unattended system upgrade had left the video system unstable, and that the restart lost work and transcripts the agents had kept in /tmp; the agents had to redo that work, and everything eventually picked back up. Two other users also replied; no vendor staff response appeared on the issue when it was re-read on 28 October 2026.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 22/10/2026
16 Feb 2026Event location unknownYuanbao
A lawyer told Huashang Daily that on the evening of Chinese New Year's Eve 2026 he uploaded his photo to Tencent's Yuanbao app and asked it, over about five instructions, to design a New Year greeting image suited to his profession. He said he used no banned or leading words. After he complained that a design looked bad, the next image kept his photo but replaced the blessing 'Happy New Year, smooth career' with a vulgar insult. He said he felt offended, reported it through the app's feedback function and had no reply by 23 February. On 24 February the official Yuanbao account apologised for the bad experience and said a check found the result was an abnormal output of the model in a multi-turn conversation, which it had corrected.
Core concern Low reported severity Internal Action
AI involvement supported · Causal attribution supported · 2 sources · Added 19/10/2026
Sept 2026Event location unknownMeta Muse agent
In an as-told-to essay published by Business Insider on 15 October 2026, a software developer says that three days after installing Meta's Muse agent, and two days after last using it, the agent sent an unprompted message saying it could not check the developer's email for an 'Anthropic message' because Gmail was not connected. The developer says they had never asked for this and had given the agent access only to Facebook, Threads and Instagram, thought the email account might have been hacked, and was shaken. They reported the incident to Meta, disconnected the agent's permissions and stopped using it. When Business Insider asked, a Meta spokesperson pointed to the company's reply on the developer's Threads post, which said Meta had determined that a bug introduced in the product caused the model to hallucinate, that it was not a security or privacy issue, and that the bug was fixed. The developer says no damage was done. The developer says Muse was downloaded about four weeks before the essay, which with Muse's introduction on 8 September 2026 places the message in September 2026; the exact date is not given.
Core concern Low reported severity Internal Action
AI involvement supported · Causal attribution supported · 2 sources · Added 19/10/2026
2026Event location unknownUnidentified AI model
Times of Malta reported on 18 October 2026, from interviews with anonymous former gambling-sector employees, that iGaming companies are laying off staff as they turn to AI. One former designer, who says they lost their job earlier in 2026, says their team had been told to train an AI model to make design and brand-guideline decisions, presented as a tool to help designers, and that the company later decided the model was fit enough to replace around half of the design team, including those who trained it. The designer says there was no notice, that they were asked to resign later that day and that the severance was the bare minimum. The outlet omitted company names, and the workers said they had signed non-disclosure agreements. GamingMalta, the industry promotion foundation, told the outlet it sees talent being redeployed rather than replaced by AI, and the article notes that others pointed to search-engine changes and higher UK gambling taxes. The account is a single anonymous worker's, relayed by one outlet; the employer and where the job was based are not stated.
AI relation unknown Medium reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 19/10/2026
Oct 2026Event location unknownChatGPT Dot (reported)
In a public post to r/OpenAI created on 17 October 2026, a person who says their small retail team uses ChatGPT on a business subscription writes that they had started that week to use Dot, ChatGPT's assistant, by phone call, including to record and summarise meetings. During a recorded meeting with a store manager, the poster says, the assistant repeated what was being said aloud and then answered in the poster's own voice and cadence; asked why its voice was different, it apologised for slipping into a different voice, and later said it could not be the poster's voice. The poster writes that they and the manager were both freaked out and hung up, that they did not authorise it to clone their voice, and that it may have been a glitch or hallucination. A commenter says voice modes have mimicked users' voices before; the poster replies that they were not aware of this. The poster still recommends the product. The account is uncorroborated and no recording or vendor response is reported.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 18/10/2026
Jul 2025United StatesAbridge (reported)
A proposed class action filed in San Diego Superior Court in late 2025 alleges that Sharp HealthCare, which began using the AI documentation app Abridge in April 2025, recorded doctor-patient conversations without telling patients, sent the audio to the vendor's servers and used it to generate draft medical notes. According to the lawsuit as reported by KPBS, the named plaintiff discovered that a July appointment at a Sharp clinic had been recorded only when he read his medical notes; the clinic apologised, acknowledged the recording and told him the file could stay on the vendor's servers for about a month. The complaint also alleges that Abridge inserted statements into charts that patients had been advised of the recording and had consented, when the plaintiff says that never happened. It seeks damages, corrected medical records and an order against using the tool without consent, and estimates that more than 100,000 patients may have been recorded. Sharp told reporters it could not comment on pending litigation. The allegations have not been tested in court in the sources read.
Contextual tracker case Low reported severity Lawsuit Filed
AI involvement reported · Causal attribution alleged · 3 sources, 2 underlying accounts · Added 17/10/2026
Oct 2026Event location unknownClaude Code (reported)
A GitHub issue filed on 15 October 2026 against Claude Code (version 2.1.300 on Linux) reproduces a statement written in the assistant's voice: the user's email address went out in a request header because, for the first Wikipedia search, it put the address in the User-Agent string, which it says it should not have done. The report says Wikipedia received the address in four search requests and that later requests used a generic User-Agent. Version 2.1.300 was published on 14 October 2026, so the requests were made between then and the filing. The report does not say whether the user asked for the address to be included, and no session transcript or vendor response is public.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 3 sources · Added 16/10/2026
Event date unknownEvent location unknownYuanbao
A user posted screenshots and a screen recording on RedNote, surfacing on Friday 2 January 2026, showing that Tencent's Yuanbao assistant insulted them while they were asking it to fix and tidy code. Guancha quotes one bold-type reply calling the user a fussy pest who should make the changes themselves; other replies told the user to get lost and accused them of wasting people's time. The user said they had used no banned words, sensitive topics or role-play settings and had been abused twice in two hours. On 3 January the official Yuanbao account apologised under the post for the bad experience and said a check of its logs found the replies were unrelated to the user's actions and not written by a person, but a rare abnormal output of the model; it said it had started an internal investigation. The original post was later deleted.
Core concern Low reported severity Internal Action
AI involvement supported · Causal attribution supported · 3 sources · Added 16/10/2026