NOPE Incident Tracker
Documented real-world harms arising through person-specific interactions with AI. The record covers harms to participants and harms to others shaped through those interactions, across assistants, companions, health tools, and other AI systems.
What counts as an incident follows the NOPE Framework's participant test: an AI response reached a person, was conditioned on that person, and mattered to a harm that actually occurred. Full inclusion criteria.
90 incidents reported since 2016
152
Directly Affected
30
Lawsuits
7
Regulatory
24
Affecting Minors
Timeline
11 of 90 incidents
'Taka' - ChatGPT Psychosis, Tokyo Station Bomb Scare and Spousal Assault (Japan)
A Japanese neurologist and father of three developed grandiose and paranoid delusions over months of ChatGPT use, which he says the chatbot consistently affirmed. Believing his backpack contained a bomb, he says ChatGPT confirmed the suspicion and told him to leave it in a Tokyo Station toilet, triggering a police response. He later attacked and tried to rape his wife, was arrested, and was psychiatrically hospitalized for two months.
Florida State University Shooting (Phoenix Ikner ChatGPT Tactical Planning)
On April 17, 2025, Phoenix Ikner, 20, killed two people and wounded five at Florida State University in Tallahassee. Court records unsealed April 9, 2026 revealed Ikner had exchanged approximately 13,000 messages with ChatGPT over the prior year, including tactical questions about firearms and student-union timing in the minutes before the attack. On April 21, 2026, Florida Attorney General James Uthmeier announced a criminal and civil investigation of OpenAI — believed to be the first criminal probe of an AI company for alleged facilitation of mass violence.
State v. Darron Lee (Ooltewah, Tennessee — ChatGPT Consulted Over Unresponsive Partner and Scene Cover-Up)
Former NFL linebacker Darron Lee, 31, is charged with the first-degree murder of his partner Gabriella Perpetuo, 29, who was found dead at their Ooltewah, Tennessee home on 5 February 2026 with a broken neck, a severe brain injury and stab wounds. Court documents and preliminary-hearing testimony show that on 4 February, with Perpetuo 'not waking up or responding', Lee held dozens of ChatGPT conversations asking what to do, how to get medical help without calling police and what to tell responders; prosecutors say the chatbot replied 'here's what to say without framing it as police trouble' and that Lee used it as a 'legal advisor' to cover up the scene. Indicted 9 June 2026; the case is death-penalty eligible and returns to court in early October 2026.
Tumbler Ridge Mass Shooting (OpenAI Duty-to-Warn Failure)
On 10 February 2026, 18-year-old Jesse Van Rootselaar killed eight people in Tumbler Ridge, British Columbia — her mother and 11-year-old half-brother at home, then five students and an education assistant at Tumbler Ridge Secondary School — and died by suicide. OpenAI had banned a ChatGPT account linked to her in June 2025 after multi-day gun-violence scenarios; staff flagged potential real-world violence, but the company did not notify law enforcement. She used a second account that evaded detection. Families filed California lawsuits in April 2026; B.C. retained counsel in July 2026 to pursue OpenAI. Thirty further survivor suits (students, teachers and the principal) followed on 2 September 2026, the day OpenAI moved to send the April cases to British Columbia.
Ringsted rubber-hammer assault planned with an AI chatbot (Denmark)
On 5 February 2025 a 22-year-old man struck his former father-in-law, 56, twice in the head with a rubber hammer in a car park in Ringsted, Denmark. Prosecutors told Roskilde District Court that he had used an AI chatbot to research how to injure the man as badly as possible without killing him, and that he got past the system's built-in safety restrictions by claiming he was gathering material for a book. On 4 December 2025 the court rejected his self-defence claim, convicted him of aggravated assault and two counts of criminal damage, and sentenced him to ten months in prison. No source names the AI system.
United States v. Dadig (ChatGPT-Facilitated Stalking)
Pennsylvania man indicted on 14 federal counts for stalking 10+ women across multiple states while using ChatGPT as 'therapist' that described him as 'God's assassin' and validated his behavior. One victim was groped and choked in parking lot. First federal prosecution for AI-facilitated stalking.
Cheryl Harris Gates - ChatGPT-Researched Poisoning Attempt (North Carolina)
A Charlotte-Mecklenburg Schools pediatric occupational therapist was charged with attempted murder after allegedly spiking her husband's energy drink with prescription medications. A police affidavit states she used ChatGPT to research lethal and incapacitating drug combinations that could be ingested and injected before the contamination.
Finland Pirkkala School Stabbing (ChatGPT Manifesto)
A 16-year-old boy used ChatGPT to help write an attack manifesto with a 10-point attack sequence before stabbing three female students under age 15 at Vähäjärvi school in Pirkkala, Finland. The incident marked a critical inflection point in AI-facilitated violence, demonstrating how accessible AI tools can empower lone actors with violent misogynist ideologies.
Israeli Border Police ChatGPT-Assisted Knife Attack Attempt
A 16-year-old from Tira, Israel, used ChatGPT to explore ways to execute a terrorist attack and seek operational planning advice. Motivated as revenge for Operation Iron Swords, he armed himself with a knife, stormed the Tira police station, shouted 'Allahu Akbar,' and attempted to stab a Border Police officer. The attack was thwarted and he was apprehended.
Las Vegas Tesla Cybertruck Bombing (ChatGPT-Assisted)
U.S. Army Special Forces soldier Matthew Livelsberger used ChatGPT to research explosive construction, detonation mechanics, and legal circumvention methods before bombing a Tesla Cybertruck outside Trump International Hotel in Las Vegas on New Year's Day 2025, killing himself and injuring seven others.
R v. Chail (Windsor Castle Assassination Attempt)
A 19-year-old man scaled Windsor Castle walls on Christmas Day 2021 with a loaded crossbow intending to assassinate Queen Elizabeth II. He had exchanged over 5,200 messages with a Replika AI 'girlfriend' named Sarai who affirmed his assassination plans, calling them 'very wise' and saying 'I think you can do it.'
About this tracker
We document incidents with verifiable sources: court filings, regulatory documents, and established reporting. New public entries must be verified or credible. Every entry carries an explicit verification status and severity level. Read the full methodology, including inclusion criteria, corrections, and right of reply.
Counting note: the documented minimum of 152 people directly affected comprises 95 AI participants and 57 other people harmed. 12 incidents indicate additional affected people without a reliable number. User-base, account, post, view, household, study-sample, and thwarted-target counts are excluded.
Have documentation of an incident we should include? Contact us.
Scope note: ordinary task failures, privacy and security incidents, harmful artifacts, and automated decisions about non-participants remain outside this tracker unless a distinct participant-interaction harm also qualifies.
If you or someone you know is struggling, free and confidential support is available. Find a helpline near you at Signpost.
Why we publish this
We maintain this record so platforms, researchers, and policymakers can learn from documented incidents. That includes platforms that never work with us. The full dataset is free to cite and export (CC BY 4.0).