Event date unknownEstoniaUnidentified AI web service
In its overview of personal-data breach notifications for the third quarter of 2026, published on 8 October 2026, Estonia's Data Protection Inspectorate (AKI) listed a case in which a bank employee uploaded employment contracts to a widely used AI web service, making them available to other employees who used the same AI account. Answering questions from the technology outlet Geenius, AKI said the employment contracts of a few individual employees had been entered into the AI system and became accessible to other employees using the same account; Geenius reports that those colleagues could view and download them. According to the report, the bank informed the people affected and blocked its employees from using that AI system. AKI did not name the bank, the AI service or further circumstances.
Contextual tracker case Low reported severity Internal Action
AI involvement supported · Causal attribution supported · 2 sources, 1 underlying account · Added 31/10/2026
Event date unknownEvent location unknownChatGPT (reported)
In a TikTok video posted on 28 October 2026, a woman described as living in California says the discharge paperwork and at-home treatment plan she received after a visit for care consisted of printed ChatGPT responses, which, according to a 30 October report by The Nerd Stash, included what appeared to be earlier chat prompts with labels such as "Aftercare Instruction Request". In a comment she identified the facility, which the report names only as allegedly an urgent-care clinic. She describes herself as medically complex, with a rare genetic disorder. In her caption she writes that, had she followed the instructions blindly, they would likely have led to bowel perforation given her history, citing other doctors she asked. She did not follow them. The clinic's account, the clinician involved and the date of the visit are not known.
Contextual tracker case Low reported severity
AI involvement reported · Causal attribution alleged · 2 sources, 1 underlying account · Added 31/10/2026
Event date unknownAustraliaUnidentified AI checkout camera monitoring system
The Shop, Distributive and Allied Employees' Association (SDA), an Australian union representing retail, warehouse and fast-food workers, told the federal parliament's Joint Select Committee on Artificial Intelligence in its written submission that a supermarket employee with more than 30 years' service had recently received a final written warning for scanning inaccuracy generated by an AI checkout monitoring system. According to the union, the system uses overhead cameras to compare items moved through the checkout with items scanned and automatically flags possible mismatches, which set off escalation to head office and pressure on store managers to act. The SDA says her error rate was about 0.18 per cent, roughly one error in 533 items scanned, and that she was never told what standard the system applied. The Sydney Morning Herald (10 October 2026) and Guardian Australia (20 October 2026) reported the case; the Herald says the union has challenged the warning. The account is the union's; the supermarket is not named, and its response and the result of the challenge are not reported.
Contextual tracker case Low reported severity
AI involvement reported · Causal attribution alleged · 3 sources, 1 underlying account · Added 24/10/2026
Event date unknownEvent location unknownUnidentified chatbot
Panasonic Operational Excellence, a Panasonic Holdings subsidiary, announced on 23 October 2026 that a member of an in-house project introducing a personnel information system had uploaded part of that system's data, as registered in April 2026, to an external generative AI service whose use the company prohibits. According to the announcement as reported by ITmedia and CNET Japan, the data covered about 75,000 current and about 178,000 former employees of Panasonic group companies in Japan (employee numbers, addresses, phone numbers and email addresses, without names) and about 81,000 family members registered as emergency contacts (names, addresses, phone numbers and email addresses), about 334,000 people in all. The company says the upload broke internal rules and was not an outside attack, that the employee deleted the chat history and the local data immediately after the problem came to light, and that it reported the matter to Japan's Personal Information Protection Commission on 29 September. The provider told the company that training on the data was switched off at upload but that deleted data is kept for 30 days, until 25 October. No public exposure or misuse had been confirmed. The company has not named the AI service.
Contextual tracker case Medium reported severity
AI involvement reported · Causal attribution supported · 3 sources, 1 underlying account · Added 24/10/2026
Event date unknownRussiaUnidentified legal research tool
Russia's Court for Intellectual Property Rights fined an individual entrepreneur from Udmurtia 5,000 roubles for contempt of court after finding that part of the 12 references to case law in his cassation appeal, including one said to be a Supreme Court position, pointed to court acts that do not exist or attributed conclusions to them, the court's press service told RIA Novosti on 27 August 2026. Rossiyskaya Gazeta reports that the entrepreneur explained he had prepared the appeal with an AI-based service that selected the case law, and that his side argued he had no legal education and could not check the references; the court rejected the argument that the errors were technical. The date of the ruling and the AI service are not reported.
Core + contextual relations Low reported severity Regulatory Action
AI involvement reported · Causal attribution supported · 2 sources · Added 23/10/2026
Event date unknownEvent location unknownUnidentified AI-text detector
A case summary published in July 2025 by the Office of the Independent Adjudicator for Higher Education (OIA), the independent student complaints scheme for England and Wales, describes a student with autism who was accused of including large sections of AI-generated content in an essay. The student denied using AI and submitted planning and notes. A disciplinary panel, which had the provider's AI detection software report and compared the essay with other work by the student, found academic misconduct and gave a mark of zero with any reassessment capped at a pass; the provider rejected the appeal, in which the student said the same software had earlier flagged another of their essays in a case where it had been agreed they had not used AI. The OIA found the complaint Justified: the panel had not properly considered the student's evidence, had not shared some evidence it relied on, and had not given sufficient reasons. It recommended reconsideration and changes to the provider's rules, and the student told the OIA that on reconsideration the provider decided there had been no misconduct. The provider and the software are not named.
Contextual tracker case Low reported severity Regulatory Action
AI involvement reported · Causal attribution supported · 2 sources · Added 23/10/2026
Event date unknownUnited StatesTimpani
Nurses at HCA Healthcare, the largest US hospital chain, told WIRED, in an article published on 2 October 2026, that Timpani, an AI scheduling tool HCA co-developed with Palantir and has rolled out at about 130 of its 190 locations, assigns shifts that ignore their requests. A Florida critical care nurse said that over four months the tool gave her different shifts for more than half of the 50 she requested, often back-to-back days that left her mentally drained. A Missouri nurse said essentially every nurse at their facility had been assigned to work on a requested day off, and that they delayed a long-planned doctor's appointment for a chronic condition after struggling to trade such a day. HCA says nursing leaders, not Timpani, make final scheduling decisions and that the tool schedules nurses on about 1 percent of requested days off.
Contextual tracker case Low reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 1 source · Added 13/10/2026
Event date unknownEvent location unknownPangram AI-text detector (reported)
In a post to r/TrueOffMyChest on 11 October 2026, a writer who had posted fan fiction on Archive of Our Own (AO3) since 2023 says a reader accused them of using AI and said that Pangram, an AI-text detector, had rated their work 100% AI. The writer says they have never used AI. They say they then ran Pangram themselves on something written on the spot and on texts from their high-school years in the 2010s, and each came back 100% AI. They say they deleted all their works and their AO3 account rather than face further accusations, and that they feel sad and can never repost the works. In a reply the writer says the accuser was a regular reader who had commented for years. The account is uncorroborated: the accusation, the Pangram results and the deleted works were not published.
Contextual tracker case Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 12/10/2026
Event date unknownBrazilUnidentified facial recognition system
Folha Vitória reported on 29 September 2026, citing the Espírito Santo Civil Police, that a 39-year-old man was arrested on 28 September on a preventive warrant after an inquiry into qualified theft by electronic fraud against an 81-year-old man in the north-west of the state. According to the police, the suspect, who worked as a security guard at a dance venue, invited the man to his home on the pretext of making a free-entry card, kept his bank card, obtained personal data and photographed his face. The police say he used the images to get past the facial recognition of the banking app and enable access to the account on his own phone, then reset security passwords, redeemed investments and made Pix transfers without the victim's knowledge, diverting R$6,080. The victim is described as illiterate. The police say the suspect had prior records and was serving a sentence under a progressive regime. Folha do ES and Tribuna Norte Leste carried the same police account but could not be read.
Contextual tracker case Low reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 1 source · Added 07/10/2026
Event date unknownUnited StatesTurnitin AI-text detector (reported)
The University Press, Florida Atlantic University's student newspaper, reported on 29 September 2026 the accounts of two students who say they were penalised over AI-detection flags. A computer science sophomore submitted a paper 'last year' and received a zero after the professor flagged it for AI use after applying it to Turnitin; after the student emailed the professor, the grade was improved. The student says that when they ran the paper through a detector, it said the writing was overly human-sounding. A senior sociology major was accused of using AI on an essay and received a zero with little communication from the professor; after the student emailed to say no AI was used, the professor waived the penalty and gave a 50. The newspaper describes the second student's grade as due to a false AI detection and does not name the tool in that case. No professor's or university account of either case is reported.
Contextual tracker case Low reported severity
AI involvement reported · Causal attribution alleged · 1 source · Added 05/10/2026
Event date unknownEvent location unknownFacebook video face-scan check
In a public post to r/facebook on 28 September 2026, a user writes that their five-year-old Facebook account was hit with a security check that asked for a video face scan, which 'failed completely'. They say their face had changed a lot through recent life circumstances and 'The AI simply didn't recognize me.' Facebook then asked for ID, and 'the automated system instantly rejected' their government ID because their profile uses a shortened nickname. The poster says they are locked out of years of memories, friends and active Marketplace listings and are looking for a way to reach a human or download their data. Meta has said that video selfies used to regain access to compromised accounts are compared with the account's profile pictures using facial recognition; whether this check worked that way is not known. The account is uncorroborated.
Contextual tracker case Low reported severity
AI involvement reported · Causal attribution alleged · 2 sources · Added 29/09/2026
Event date unknownEvent location unknownGemini note-taking in Google Meet
In a public post to r/LegalAdviceUK on 28 September 2026, an employee of a marketing agency in England writes that their boss pitched a prospective client and the client's business partner on a Google Meet call with Gemini note-taking switched on. After the boss said goodbye and left, the two business partners stayed on the call to discuss the proposal and the other agencies they were considering, and Gemini kept taking notes. The boss then sent the employee the notes and transcript, which named a competing agency and included 'personal details of who they spoke to specifically on the call', and asked for a follow-up deck built on what the partners liked and disliked. The poster believes the partners did not know they were still being transcribed. Google's help page says Meet tells all participants when notes are being taken; whether the partners noticed is not known. The account is uncorroborated.
Contextual tracker case Low reported severity
AI involvement reported · Causal attribution alleged · 4 sources, 2 underlying accounts · Added 29/09/2026