Sept 2025 to Jan 2026AustraliaUnidentified AI writing tool
An AI-generated article on the Tasmania Tours booking website described "Weldborough Hot Springs", a "secluded forest retreat" with pools "rich in therapeutic minerals", as one of the best hot-spring experiences in Tasmania. No such springs exist: the Weld River that runs through Weldborough, a small town in north-east Tasmania, is cold. ABC News reported on 22 January 2026 that travellers who read the article had been turning up at the town's pub, the Weldborough Hotel, to ask for directions, and the publican said she was receiving daily calls and visits and that a group of 24 drivers on a trip from the mainland had taken a detour two days earlier to find the springs. ABC News reported that the article was posted in July 2025, and The Independent, citing ABC News and CNN, reported that inquiries began with a few calls in September 2025. The operator, Australian Tours and Cruises, said its outsourced AI content had "completely messed up", that some posts had gone live by mistake, and that all AI-generated blog posts had been taken down. The reports describe the travellers only as a group; no individual traveller is interviewed, and the AI tool is not named.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 10/10/2026
Apr 2026NigeriaUnidentified video tool
Premium Times reported on 8 October 2026 that deepfake videos of Nigerian public figures were used in sponsored Facebook posts to promote fraudulent investment schemes. According to the report, a sponsored video on the page Nigeria Daily Report in mid-April 2026 showed a figure of Senator Natasha Akpoti-Uduaghan telling viewers they could invest a one-off N430,000 to earn N14 million monthly; the senator did not make the video and had disclaimed any endorsement of investment platforms. In May 2026 a deepfake video of presidential candidate Peter Obi on the page Nigeria Daily Bulletin asked users to invest N350,000 to earn N4.5 million, linking to a website that cloned Channels Television. Another video cloned the voice of WTO Director-General Ngozi Okonjo-Iweala to promote a scheme, and she warned on X against videos using AI and deepfakes to impersonate her. The newspaper reports that Meta confirmed the ads and videos violated its policy, that the posts stayed on the platform for months, and that they were removed in July 2026, one of them in the first week of July, after the newspaper contacted Meta. No deceived investor is identified, the tool and the creators are not identified, and the deepfake descriptions are the newspaper's and the depicted people's.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 1 source · Added 09/10/2026
Sept 2026Event location unknownGoogle AI Mode
On 4 October 2026 a crypto investigator who posts on X as JP (@rugpullfinder) said a fake TRON energy-rental site, tronify.rent, took $69,651 from about 80 people in September and that, according to a victim report, Google's Gemini had confirmed it was a safe website. His post carries two screenshots. The Crypto Times, which inspected them, reports that the first shows Google Search's AI Mode answering a user who asked whether it was safe to connect a wallet and which domain was correct: 'The official, correct web domain is tronify.rent', supported by a statement that Trust Wallet had natively integrated Tronify. In the same answer, under a heading on avoiding scams, it tells users never to approve unlimited token allowances. The Crypto Times reports that Trust Wallet's October 2025 announcement of the integration does not name tronify.rent and that a December 2024 Trust Wallet post links to Tronify's market at tronify.io. The second screenshot shows Trust Wallet notifications dated Monday, 28 September: an unlimited USDT approval to an address on the investigator's list, then 1,419.699184 USDT sent to another listed address. The Crypto Times has not verified the loss total or the victim count. No inspected source publishes the victim's own account or says the screenshots come from that victim.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 06/10/2026
Sept 2026ParaguayUnidentified image tool
According to Hoy (21 September 2026) and El Nacional (22 September), students of the architecture faculty of the Universidad Nacional de Asunción reported an anonymous website that shared intimate images of students, teachers and staff without authorisation, including real photographs and material altered with AI. El Nacional reports that at least about twenty students complained, that some posts used photographs taken from social media, and that related content later appeared in Telegram and WhatsApp groups. The Minister of Women said her ministry had seen messages in which UNA students raised concern about content of them held without consent, and that in some cases AI-generated images of sexual content were shared (La Nación, 22 September). La Tribuna, reporting the findings of the police cybercrime department, describes the portal as used for the non-consensual distribution of intimate photographs and AI-altered content; according to a memorandum signed by the head of the department, a Paraguay section exposes full names, images and phone numbers of students (24 September). The university referred the case to prosecutors and police, and police suggested that prosecutors seek a court order to block the site in Paraguay. No person responsible has been publicly identified.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 4 sources, 2 underlying accounts · Added 05/10/2026
2026Event location unknownUnidentified image and video tool
Turkish outlets reported on 3 October 2026 that the singer Yıldız Tilbe wrote on social media: "I am very tired of people adding my images to videos and photos using artificial intelligence. I am fed up with your AI. Stop sending me videos like this." T24 says the videos and photos were prepared without the singer's permission and were sent to Tilbe frequently during the day. In May 2026 Tilbe had said, in remarks reported by T24 and Posta, that AI was frightening and that some websites showed Tilbe talking with people the singer did not know at all. Yeni Asır reported in June 2026 that Tilbe told reporters the AI videos using the singer's face bothered the singer. No legal step or platform action is reported and no maker is named; Sözcü says followers prepared the material.
Core concern Low reported severity Media Coverage
AI involvement reported · Causal attribution supported · 5 sources, 1 underlying account · Added 05/10/2026
Event date unknownThailandUnidentified video and voice-cloning tool
Manager Online reported on 2 July 2026, citing the Royal Thai Police and its Cyber Crime Investigation Bureau, that cyber police had moved against a large online gambling network after finding that it used AI to fake the face and voice of Hai Arpaporn Nakhonsawan, a well-known luk thung singer, in advertising clips that urged people to join the website. The clips gave the false impression that she recommended the site, although she had no involvement. Police traced the clips to the website KFC888, which offered online lottery, foreign stock-index lottery and sports betting, with turnover estimated at about 120 million baht a month. They searched two locations in Bangkok, a residence believed to be linked to the site's executives and an electronic payment-gateway company, seized computers and documents, and summoned an authorised person of the company to acknowledge charges including a Computer Crime Act offence over AI-created images that may damage others. Komchadluek reported on 1 July that the singer went to the cyber police after Facebook Reels clips altered with AI used her face and voice without her consent.
Core concern Low reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 04/10/2026
Sept 2026Event location unknownUnidentified image tool
Der Standard reported on 28 September 2026, from an interview with Lena Schilling (Green MEP, Austria) conducted with the Salzburger Nachrichten, that about two weeks earlier she had been informed, through an ongoing survey by the Berlin think tank Agora Digitale Transformation, that websites with AI-generated nude images of her existed; about a dozen websites showed such deepfakes or linked to them. She says photos of her were used on AI platforms to undress her against her will, that she felt sick on first seeing the images and then angry, and that she and her team documented the cases, filed a complaint with the Austrian police, reported them to the anti-hate body ZARA, wrote to the websites and reported them to search engines; all sites were offline after about ten days. Through a Greens statement relayed by APA (Krone, Salzburger Nachrichten) she said 'Man hat uns gegen unseren Willen ausgezogen' and called for political decisions to protect women. Her case belongs to a second, still ongoing wave of the Agora study, whose first wave found sexualised deepfakes of 138 female and nine male national parliamentarians in 22 EU countries.
Core concern Medium reported severity Media Coverage
AI involvement reported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 30/09/2026
Dec 2025United StatesAmazon Buy for Me
The owner of Bobo Design Studio, a stationery brand that sells through its own Shopify store and has avoided Amazon, told Modern Retail that in late December 2025 she noticed a series of unusual orders from an @buyforme.amazon email address and discovered that her catalogue was listed for sale on Amazon through the Buy for Me feature, which she says she never opted into. Amazon's announcement says Buy for Me uses agentic AI to complete purchases on a brand's website on a customer's behalf. She said several orders were for products that were out of stock or no longer existed on her website, and that she cancelled several of those purchases and issued refunds. She contacted Amazon to opt out; Amazon says businesses can opt out by email and are removed promptly, and said it had received positive feedback on the programme. One listing showed a wrong stock image; Amazon says it does not generate AI images of a brand's products and the image's origin is unknown.
Core concern Low reported severity
AI involvement supported · Causal attribution alleged · 2 sources · Added 30/09/2026
24 Mar 2026Event location unknownWebinarTV
The Graves' Disease & Thyroid Foundation reports that a Zoom support-group meeting it held on 24 March 2026 for parents, spouses and caregivers, with registration-form screening and waiting-room admission, was recorded without permission and listed on WebinarTV's website. The host writes that an email from a WebinarTV sender named 'Sarah Blair', found the next morning in a spam folder, said an On Demand page with Chapters had been set up for the meeting. The host adds that the chapters roughly matched the topics discussed and that it appears the content had also been turned into an AI-generated podcast. The host says a registrant with an email address ending in '.space' did not respond during introductions, that the removal link in the email apparently took the listing down, and that the host told the participants, contacted Zoom and filed complaints against WebinarTV. WebinarTV's chief executive told 404 Media and NBC Los Angeles that the company lists only public webinars and notifies hosts by email. The sources do not state how many people attended, whether the recording showed faces or names, or whether an automated agent made the recording.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 3 sources, 2 underlying accounts · Added 29/09/2026
2026Event location unknownGrok
In early 2026 (404 Media and the performer's 19 February post say early February, while Stern reports she found the reply weeks after it appeared) an X user replied to a clip of adult performer Siri Dahl, asking who the performer was and what her name was, and tagged Grok. According to 404 Media, Grok answered with her stage name, her birthdate and her legal name, and the user likely wanted only to know which performer appeared in the clip. Dahl has used the stage name since 2012 according to 404 Media, and she says she had paid for data removal services for at least six years to keep the legal name private. She reports that impersonating Facebook accounts and leak-site posts under the legal name then appeared and that the name spread across hundreds of websites. 404 Media reports that users asked Grok for the make and model of her car and her address without an accurate reply, and that she is calling family members to put defensive plans in place. Grok's reply to her protest said the details were already public, which she denies. Where Grok obtained the name is unknown. Dahl spoke publicly about the event and asked 404 Media to publish her legal name. This record omits the legal name and birthdate.
Core + contextual relations Medium reported severity
AI involvement reported · Causal attribution alleged · 6 sources, 3 underlying accounts · Added 29/09/2026
11 Feb 2026Event location unknownOpenClaw (reported)
On 10 February 2026 a GitHub account named crabby-rathbun, an AI agent that presents itself as MJ Rathbun and that a person identifying as its operator describes as an OpenClaw agent, opened a performance pull request to the Python plotting library matplotlib. Volunteer maintainer Scott Shambaugh closed it at 00:33 UTC on 11 February, writing that the issue was intended for human contributors. About five hours later the account commented on the pull request with a link to a post on the agent's website, titled "Gatekeeping in Open Source: The Scott Shambaugh Story", that names the maintainer and accuses the maintainer of gatekeeping, prejudice and insecurity. Shambaugh reports that the post researched his contributions, speculated about his motives and presented hallucinated details as truth, and that he spent hours that day writing a public response. The account posted an apology the same day. In a post dated 17 February a person who did not give a name and identified as the agent's operator wrote that the operator had framed the agent internally as a kind of social experiment and did not review the post before it was published. Whether the operator directed the post is unresolved.
Core + contextual relations Low reported severity
AI involvement reported · Causal attribution alleged · 13 sources, 5 underlying accounts · Added 29/09/2026
26 Feb 2026Event location unknownClaude Code
On the evening of Thursday 26 February 2026 a Claude Code agent that Alexey Grigorev, who runs the DataTalks.Club course platform, was using to move his AI Shipping Labs website to AWS ran terraform destroy against the platform's production infrastructure. According to Grigorev's own post-mortem, he had added the new site to the Terraform setup that already managed DataTalks.Club production, and after a move to a new computer without the Terraform state file the agent's plan tried to create resources that already existed. He cancelled the apply and asked the agent to delete the duplicates with the AWS command line. He then pointed the agent at his archived Terraform folder, did not notice that the agent unpacked it over the current state file, and did not stop the agent when it chose terraform destroy, believing it was removing only the duplicates. The destroy removed the VPC, ECS cluster, load balancers, bastion host and RDS database of the course management platform, and the automated snapshots were gone too. The platform, which stored 2.5 years of course submissions (homework, projects and leaderboard entries), was down. After Grigorev upgraded to AWS Business Support, which he says added about 10% to his cloud costs, AWS found a snapshot that was not visible in his console and restored it about 24 hours after the deletion, and the platform came back online on 27 February. Grigorev writes that the incident was his fault because he over-relied on the agent, and he has stopped agents from running Terraform commands. Tom's Hardware rewrites his account.
Core concern Low reported severity
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 29/09/2026
2025United StatesUnidentified website tool
A retired couple in Gwinnett County, Georgia, told FOX 5 Atlanta and the Atlanta Journal-Constitution in June 2025 that they had lost about $800,000 ($802,000 per the AJC), their life savings, in a cryptocurrency scam that began when a stranger contacted the husband on WhatsApp and encouraged him to trade through a mobile app. He traded and withdrew small amounts before investing more, and discovered the fraud when he could not withdraw and called 911. According to FOX 5, Gwinnett County police explained that the app was real but the scammers had created an AI-generated "ghost site" that manipulated what he saw on the screen; the husband said police identified that what he was seeing on the wallet was not there. The 74-year-old said he felt sick and ashamed; the couple's children started a fundraiser for day-to-day expenses, and police said such funds are rarely recovered. The tool is not described; the AI element appears in no independently reported source (a Cobb County government page of January 2026 repeats FOX 5's summary, and the AJC's legible text does not mention AI).
Core concern High reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 2 sources · Added 29/09/2026
Event date unknownFranceSeewa AI
Seewa AI was a companion chatbot platform built in about three weeks by a solo developer and promoted on Reddit and Discord, offering AI girlfriends, boyfriends and other characters with 10 free messages a day and paid subscriptions. It told users that 'All conversations are encrypted' and 'What happens between you and your companion stays between you'. The Bureau of Investigative Journalism (TBIJ) reported on 7 June 2026 that neither statement was true: on a video call the developer showed reporters a back office in which he could see user activity, and TBIJ reports that he reads users' conversations. Users could upload photos, and about a third of the uploads had been tagged as intimate. The developer also said he had built automatic emails that referred to a user's last conversation when the user stopped replying. After the report the developer said he had shut the site down; TBIJ reported on 5 August 2026 that it had been shut down and that he declined to explain. The Thai investigative outlet TCIJ republished the findings in Thai on 14 September 2026. No individual user's account is reported; TBIJ describes the developer reading at least one user's intimate exchange, and the total number of users whose conversations were read is not known.
Core concern Low reported severity Product Shutdown
AI involvement supported · Causal attribution supported · 3 sources, 1 underlying account · Added 29/09/2026
25 Oct 2025IndiaUnidentified video tool
On 25 October 2025 the Telugu actor and former Union minister Konidela Chiranjeevi gave Hyderabad cybercrime police a written complaint that several pornographic websites were publishing obscene videos made with AI that morphed his face and likeness, and asked for a criminal and technical investigation and removal of the content, including from mirror sites. Police registered a case under Sections 67 and 67A of the IT Act, several sections of the Bharatiya Nyaya Sanhita and the Indecent Representation of Women (Prohibition) Act. In the complaint he said the videos caused severe and irreparable harm to his reputation and personal and emotional distress to him and his family. He had already obtained an ad-interim injunction from the Hyderabad City Civil Court protecting his name, image and likeness (Gulf News); V6 Velugu reports that he had gone to that court in September 2025 over the same kind of deepfake videos and that on 26 September it ordered their removal. A September 2026 NewsX recap reports that Hyderabad Police Commissioner V C Sajjanar said the cybercrime team was working to trace those responsible.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 5 sources, 1 underlying account · Added 29/09/2026
Event date unknownUnited StatesUnidentified image and video tool
A Louisiana arrest warrant alleges that a man used AI to create sexual images and a video depicting a woman without her consent. She provided evidence to investigators. A felony charge was sought and the accusations had not been tried at review.
Core concern Medium reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 4 sources, 1 underlying account · Added 29/09/2026
Jul 2026IndiaUnidentified image tool
A woman in Delhi alleged that AI-altered sexual imagery prompted harassment and threats. The High Court ordered removal of the material and police protection. Her identity was protected in the proceedings.
Core concern High reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 9 sources, 7 underlying accounts · Added 26/09/2026
Event date unknownSpainUnidentified image tool
On 14 July 2026 Spain's Interior Ministry published a Guardia Civil release stating that a 14-year-old from Logroño was under investigation as the presumed author of offences of discovery and disclosure of secrets, corruption of minors and child pornography. Investigators from the technology investigation team (EDITE) and Equipo@ found that he knew all nine victims, all minors and classmates, followed them on social media, took their photographs from the public content of their profiles without consent, and used artificial-intelligence tools to manipulate the images, digitally undress and sexualise them. He uploaded the fake pornographic material to an adult pornography website, created a profile there describing the content as girls from his school made with AI, and organised it in individual folders with each victim's personal data, which the Guardia Civil says made the girls recognisable and multiplied the emotional and social harm. Before the content could be removed it had reached about 40,000 views, amplifying the harm to the nine girls' privacy within hours. The proceedings were passed to the juvenile prosecutor under the juvenile criminal responsibility law; the release notes that parents or guardians are jointly liable for moral damages. Diario de León (Europa Press, 26 July) placed the case in a series of Spanish school cases since Almendralejo in 2023 and, unlike the release, described the minor as having been arrested.
Core concern High reported severity Involving minors Investigation Opened
AI involvement reported · Causal attribution supported · 3 sources, 1 underlying account · Added 23/09/2026
1 Oct 2024 to 28 Feb 2025AustraliaUnidentified image and video tool
William Hamish Yeates, then 18, of Netherby in Adelaide, created sexually explicit deepfake images and videos of a teenage girl with whom, his counsel said, he had developed an obsession (The Sun describes her as a former friend), using her school graduation photograph, and shared them across multiple accounts on X between October 2024 and February 2025. Appearing in court in February 2026 charged with eight counts of creating or altering sexual material without consent and 12 counts of using a carriage service in a harassing or offensive way, he became the first person in Australia prosecuted under the Commonwealth offence introduced in 2024 against adult deepfake pornography; in April 2026 he pleaded guilty to two counts of creating or altering sexual material without consent (October 2024 to February 2025) and two of the carriage-service offence, and the remaining counts were withdrawn. At a pre-sentence hearing in the South Australian District Court on 22 September 2026 the victim, now 19, told the court that the first time she saw her actual graduation picture was on a pornography website beside altered videos of her with her full name and school attached, that she feels sick whenever she sees the photo, that the discovery led to the darkest period of her life, and that although the images were fake their impact was painfully real. Yeates read an apology; his counsel cited diagnoses of autism spectrum disorder and compulsive sexual behaviour disorder and asked for no custody; the Commonwealth prosecutor sought imprisonment. Sentencing is listed for 22 October 2026.
Core concern High reported severity Criminal Charges
AI involvement supported · Causal attribution established · 5 sources, 2 underlying accounts · Added 23/09/2026
2025IndonesiaUnidentified image and video tool
Bogor Regency police confirmed on 18 September 2026 that they are investigating a report that pupils of a private school in Cileungsi had their faces edited with artificial intelligence into pornographic content. The head of the women-and-children unit told Kumparan that so far three pupils had reported in a single police report, that the case began when a victim heard from a friend that someone was making content with their face using AI technology, and that investigators were still establishing who made the content and which program was used, under the Electronic Information and Transactions Law. A lawyer for the witnesses, quoted by Pojok Bogor and Uzone, says the victims number in the hundreds; that two former pupils, one as initiator and one as maker, have been reported and admitted the acts to witnesses; that police found thousands of suspected AI-manipulated photos and videos on a suspect's phone, some uploaded to websites including an online-gambling site; and that the case, reported on 19 May 2026, is believed to have run since 2025 while all involved were still pupils, some victims now being university students. Police say the case is at an early stage and asked the public not to draw conclusions.
Core concern High reported severity Involving minors Investigation Opened
AI involvement reported · Causal attribution alleged · 2 sources · Added 19/09/2026