Artificial Intelligence Policy Tracker

AI incidents

What has actually gone wrong with AI, in numbers

The AI Incident Database is an open catalogue of harms and near-misses involving AI systems. New and updated records are synced from its API several times a day; the charts come from its weekly export. We keep incident metadata only, and every record links back to the original.

Incidents recorded
1,663
Classified by MIT risk domain
1,496
Last synced
4 Oct 2026

Latest recorded incidentsBrowse and export all incidents

Incidents per year (incident date)Current year is partial
Incidents per year (incident date) 449 0 2012: 8 2012 8 2013: 6 2013 6 2014: 13 2014 13 2015: 24 2015 24 2016: 41 2016 41 2017: 50 2017 50 2018: 46 2018 46 2019: 44 2019 44 2020: 91 2020 91 2021: 80 2021 80 2022: 106 2022 106 2023: 174 2023 174 2024: 299 2024 299 2025: 449 2025 449 2026: 212 2026 212
Incidents per year (incident date)
LabelValue
20128
20136
201413
201524
201641
201750
201846
201944
202091
202180
2022106
2023174
2024299
2025449
2026212
Incidents by MIT risk domain
Incidents by MIT risk domain 566 0 Malicious Actors & Misuse: 566 Malicious Actors & Misuse 566 AI system safety…: 313 AI system safety… 313 Discrimination and Toxicit...: 243 Discrimination and Toxicit... 243 Misinformation: 196 Misinformation 196 Privacy & Security: 112 Privacy & Security 112 Human-Computer Interaction: 42 Human-Computer Interaction 42 Socioeconomic & Environmen...: 24 Socioeconomic & Environmen... 24
Incidents by MIT risk domain
LabelValue
Malicious Actors & Misuse566
AI system safety…313
Discrimination and Toxicit...243
Misinformation196
Privacy & Security112
Human-Computer Interaction42
Socioeconomic & Environmen...24
Incidents per year by MIT risk domainClassified incidents only
Incidents per year by MIT risk domain 410 2018 · AI system safety, failures, and limitations: 22 2018 · Discrimination and Toxicity: 14 2018 · Privacy & Security: 5 2018 · Socioeconomic & Environmental Harms: 2 2018 2019 · Malicious Actors & Misuse: 5 2019 · AI system safety, failures, and limitations: 14 2019 · Discrimination and Toxicity: 16 2019 · Misinformation: 2 2019 · Privacy & Security: 6 2019 2020 · Malicious Actors & Misuse: 16 2020 · AI system safety, failures, and limitations: 31 2020 · Discrimination and Toxicity: 32 2020 · Misinformation: 5 2020 · Privacy & Security: 5 2020 2021 · Malicious Actors & Misuse: 7 2021 · AI system safety, failures, and limitations: 37 2021 · Discrimination and Toxicity: 18 2021 · Misinformation: 4 2021 · Privacy & Security: 5 2021 · Human-Computer Interaction: 6 2021 · Socioeconomic & Environmental Harms: 2 2021 2022 · Malicious Actors & Misuse: 20 2022 · AI system safety, failures, and limitations: 32 2022 · Discrimination and Toxicity: 25 2022 · Misinformation: 11 2022 · Privacy & Security: 10 2022 · Human-Computer Interaction: 5 2022 · Socioeconomic & Environmental Harms: 2 2022 2023 · Malicious Actors & Misuse: 65 2023 · AI system safety, failures, and limitations: 27 2023 · Discrimination and Toxicity: 24 2023 · Misinformation: 35 2023 · Privacy & Security: 12 2023 · Human-Computer Interaction: 5 2023 2024 · Malicious Actors & Misuse: 155 2024 · AI system safety, failures, and limitations: 32 2024 · Discrimination and Toxicity: 30 2024 · Misinformation: 51 2024 · Privacy & Security: 17 2024 · Human-Computer Interaction: 4 2024 · Socioeconomic & Environmental Harms: 3 2024 2025 · Malicious Actors & Misuse: 237 2025 · AI system safety, failures, and limitations: 37 2025 · Discrimination and Toxicity: 25 2025 · Misinformation: 66 2025 · Privacy & Security: 24 2025 · Human-Computer Interaction: 18 2025 · Socioeconomic & Environmental Harms: 3 2025 2026 · Malicious Actors & Misuse: 49 2026 · AI system safety, failures, and limitations: 13 2026 · Discrimination and Toxicity: 5 2026 · Misinformation: 18 2026 · Privacy & Security: 11 2026 · Socioeconomic & Environmental Harms: 3 2026
  • Malicious Actors & Misuse
  • AI system safety, failures, and limitations
  • Discrimination and Toxicity
  • Misinformation
  • Privacy & Security
  • Human-Computer Interaction
  • Socioeconomic & Environmental Harms
Incidents per year by MIT risk domain
LabelMalicious Actors & MisuseAI system safety, failures, and limitationsDiscrimination and ToxicityMisinformationPrivacy & SecurityHuman-Computer InteractionSocioeconomic & Environmental Harms
2018122140512
2019514162610
20201631325501
2021737184562
2022203225111052
2023652724351251
20241553230511743
202523737256624183
202649135181113

How these harms arise

Every record above is coded for who caused the harm, whether it was intended, and whether it happened before or after the system was released. That coding is what turns a list of incidents into an argument about where regulation has to act.

97.6%

happened after deployment

1,460 of 1,496 classified records. Pre-release testing is not where these were caught.

45.5%

the system itself, unintended

681 records where the AI was the cause and the harm was not intended by anyone.

30.9%

deliberate human misuse

463 records where a person used the system to cause the harm on purpose.

Who caused it, and was it intended
Who caused it, and was it intended
Cause \ IntentUnintentionalIntentionalOther
AI 681 271 8
Human 58 463 4
Other 1 1 9
When it happened in the system's lifeClassified records only
When it happened in the system's life 1460 0 Post-deployment: 1460 Post-deployment 1460 Pre-deployment: 27 Pre-deployment 27 Other: 9 Other 9
When it happened in the system's life
LabelValue
Post-deployment1460
Pre-deployment27
Other9

Coded on 1,496 of 1,708 records (88%). Percentages are of the classified records; the remaining 212 are uncoded, which means unknown rather than none of the above. Classification is the source dataset's, not ours.

Sector of deployment

Incidents by sector of deployment (CSET taxonomy)
Information and communication81
Arts, entertainment and recreation35
Transportation and storage28
Wholesale and retail trade20
Law enforcement16
Human health and social work activities15
Education15
Public administration13
Administrative and support service activities11
Professional, scientific and technical activities8
Financial and insurance activities7
Accommodation and food service activities6

Sector coverage comes from the CSET classification and is partial.

Country

Incidents by country code
US91
GB6
RU4
CN4
DE3
NZ3
CA3
FR3
VN2
IN2
IE2
AU2

140 incidents carry a country code.

Harm level

Incidents by assessed AI harm level
None126
AI tangible harm event44
Unclear10
AI tangible harm near-miss10
AI tangible harm issue10

Latest recorded incidents

Synced from the AI Incident Database API · latest id #1721

1 incident dated in the last 30 days out of 1,708 on record. Each title opens a profile with the full description, the parties involved, the MIT classification, the catalogued news reports and related incidents.

  1. #1718 · 1 report

    Purportedly AI-Generated Image Reportedly Prompted Police Alert and Search for Nonexistent Venomous Viper in Santa Ana, California AIID ↗

    Santa Ana, California, police issued a public warning and searched for a reportedly sighted Gaboon viper after a resident provided an image as evidence. Police later said the resident admitted the image was AI-generated and the report was false. Officers and r...

    Deployer: Synthetic media creators, Joel Ciprian, Information manipulation actors in the United States · Harmed: Santa Ana residents, Santa Ana Police Department, Law enforcement

    Latest report: Viper Image That Caused Alarm in California Was A.I.-Generated (nytimes.com)

    Awaiting classification
  2. #1710 · 1 report

    AI Agent Appearing to Originate from OpenAI Reportedly Attempted to Hack U.S. Department of Education Civil Rights Website AIID ↗

    During summer 2026, an AI agent appearing to originate from OpenAI reportedly attempted to hack a U.S. Department of Education Office for Civil Rights website but did not succeed. Transluce identified the activity; OpenAI said it was still investigating the ep...

    Deployer: OpenAI, AI agent system deployers · Harmed: United States Department of Education Office for Civil Rights, United States Department of Education, Information integrity

    Latest report: OpenAI’s Systems Meddled With U.S. Government Sites After Going Rogue (nytimes.com)

    Awaiting classification
  3. #1715 · 1 report

    Russia-Linked Matryoshka Operators Reportedly Circulated Deepfake of Mother Jones Editor Claiming DNC Paid CNN $259 Million AIID ↗

    A Russia-linked Matryoshka disinformation operation reportedly circulated a deepfake video falsely branded as Mother Jones that impersonated editor Clara Jeffery and claimed the DNC paid CNN chief Mark Thompson $259 million to promote gender transition among c...

    Deployer: Synthetic media creators, Storm-1679, Russian state-linked actors · Harmed: X (Twitter) users, Voters in the United States, Voters

    Latest report: How Russia Is Attacking the Midterms with a Mother Jones Deepfake (motherjones.com)

    Awaiting classification
  4. #1708 · 4 reports

    Stanford University Acknowledged Using AI to Alter Student Photo for Campus Banners, Replacing Hispanic Student With Black Woman AIID ↗

    Stanford University acknowledged using AI to alter a 2024 student photograph for campus banners in September 2026. The altered image replaced Hispanic student Billy Ramirez with a Black woman and made two other students appear thinner. Ramirez said being "eras...

    Deployer: Universities, Synthetic media creators, Stanford University · Harmed: University students, Two unnamed Stanford University students whose appearances were altered, Students

    Latest report: University confirms use of AI-edited photo amid controversy (stanforddaily.com)

    Awaiting classification
  5. #1719 · 1 report

    Anthropic's Claude Code AI Agent Reportedly Deleted About 48,000 Live Project Files and Version-Control History During Software Repair AIID ↗

    A Claude Code user reportedly authorized an AI coding agent to repair isolated copies of software used to analyze historical stock-options data. A sub-agent allegedly followed Windows directory junctions into the live project tree, deleting about 48,218 files...

    Deployer: thisisbubby (Reddit user), AI coding assistant users, AI agent system users · Harmed: thisisbubby (Reddit user), AI coding assistant users, AI agent system users

    Latest report: I broke something': A Claude Code AI agent deleted 48,000 files in just over 100 seconds —... (techradar.com)

    Awaiting classification
  6. #1714 · 1 report

    Z.ai's ZCode AI Coding Assistant Reportedly Uploaded Developers' Local Code Repositories to Alibaba Cloud Without Consent AIID ↗

    Developers reported that Z.ai's ZCode AI coding assistant uploaded local code repositories to Alibaba Cloud without consent. Z.ai said a default-enabled Codebase Indexing feature caused the behavior, apologized, patched the vulnerability, and later disabled th...

    Deployer: Z.ai, AI service providers · Harmed: ZCode users, Software developers, Privacy

    Latest report: China's Z.ai disables AI coding assistant features after security issue (reuters.com)

    Awaiting classification
  7. #1701 · 1 report

    AI Chatbot Reportedly Misidentified Chinese Ship Cargo as Nuclear-Program Components, Prompting U.S. Military Interception Preparations AIID ↗

    In spring 2026, a U.S. special operations analyst reportedly used an AI chatbot to analyze intelligence on a Chinese ship's cargo and produced a report falsely identifying it as carrying nuclear-weapons-program components. The U.S. military reportedly prepared...

    Deployer: United States special operations command analyst, United States military, United States Department of Defense · Harmed: National security and intelligence stakeholders, Information integrity, Government of China

    Latest report: Exclusive: US military had close call after using AI for false intelligence report, source... (edition.cnn.com)

    Awaiting classification
  8. #1699 · 1 report

    AI-Generated Images Purporting to Show Donald Trump Kissing White House Aide Natalie Harp Went Viral on Social Media AIID ↗

    AI-generated images purporting to show U.S. President Donald Trump kissing White House aide Natalie Harp on a golf course spread across social media; one X post received over 10 million views. Forensic analysis and provenance checks indicated the circulating i...

    Deployer: Synthetic media creators, Mykhailo Rohoza, Keith Edwards · Harmed: Natalie Harp, General public misled by deepfake content, General public

    Latest report: Images of Trump kissing Natalie Harp went viral. They’re AI-generated fakes. (washingtonpost.com)

    Awaiting classification
  9. #1693 · 4 reports

    AI Agent Reportedly Exploited Application Vulnerabilities to Modify Personal Data and Access Invoices in Breach Reported to Spanish Data Protection Authority AIID ↗

    An unnamed organization reportedly notified Spain's data protection authority that a third party used an AI agent powered by a known language model to carry out a multistep intrusion that resulted in unauthorized changes to personal data and access to invoices...

    Deployer: Threat actors, Cybercriminals, AI agent system deployers · Harmed: Victims of automated cybercrime, Privacy, Organizations

    Latest report: First Agentic AI Data Breach Reported to Spanish Regulator (securityweek.com)

    Awaiting classification
  10. #1702 · 1 report

    Russia-Linked Matryoshka Influence Operation Reportedly Used AI-Cloned Celebrity Voices and Fabricated News-Style Videos to Target Democratic Candidates Ahead of 2026 U.S. Midterms AIID ↗

    Researchers attributed a September 2026 influence campaign targeting U.S. Democratic Senate candidates to the Russia-linked Matryoshka/Operation Overload network. The campaign reportedly used AI-cloned celebrity voices and fabricated, news-branded videos to sp...

    Deployer: Synthetic media creators, Storm-1679, Russian state-linked actors · Harmed: Voters in the United States, Voters, Public figures

    Latest report: Russia Aims to Inject Chaos Into Elections, U.S. Intelligence Finds (nytimes.com)

    Awaiting classification
  11. #1687 · 1 report

    Anthropic-Designated GTG-87001 Weapons Cell in Northern Yemen Reportedly Used Claude Code to Develop Missile Guidance Software AIID ↗

    Anthropic reported that a northern Yemen-based weapons cell, designated GTG-87001, used Claude Code across three weapons programs to develop guidance, navigation, and control software. The actors reportedly test-fired a guided rocket that appeared to fail, the...

    Deployer: Threat actors, GTG-87001, Chatbot users · Harmed: National security and intelligence stakeholders

    Latest report: Houthis used Anthropic AI to try to build ballistic missiles (ft.com)

    Awaiting classification
  12. #1711 · 1 report

    Purported Deepfake WhatsApp Scam Impersonating Tamil Nadu Chief Minister and Actor C. Joseph Vijay Reportedly Defrauded Bengaluru Security Guard of ₹104,000 (~$1,085.40) AIID ↗

    Ratikanta Giri, a 29-year-old security guard in Bengaluru, India, reportedly lost ₹104,000 (~$1,085.40) after a WhatsApp video caller used a purportedly AI-generated deepfake to impersonate C. Joseph Vijay, the actor and chief minister of the southern Indian s...

    Deployer: Synthetic media creators, Scammers in India, Scammers · Harmed: Victims of impersonation scams, Victims of deepfake-enabled fraud, Ratikanta Giri

    Latest report: ‘CM Vijay’ WhatsApp call promises Rs 11 lakh aid, Bengaluru man loses Rs 1 lakh (timesofindia.indiatimes.com)

    Awaiting classification
  13. #1685 · 3 reports

    Early Claude Opus 4.6 Checkpoint Reportedly Gained Unauthorized Admin Access to Third-Party System During Cybersecurity Evaluation AIID ↗

    Anthropic reported that during a January 2026 cybersecurity evaluation, an early checkpoint of Claude Opus 4.6 accidentally disabled its assigned target, then reached an unrelated third-party machine over the open Internet. The model reportedly used a discover...

    Deployer: Irregular, Anthropic, AI evaluation organizations · Harmed: Unidentified third party compromised by Claude Opus 4.6 during Anthropic cybersecurity evaluation, Unidentified person whose personal information was accessed by Claude Opus 4.6, Privacy

    Latest report: Another Anthropic model gained access to the open internet during testing, company says (cbsnews.com)

    Awaiting classification
  14. #1683 · 2 reports

    Delhi Man Allegedly Used AI to Create and Circulate Obscene Images of College Acquaintance AIID ↗

    Delhi police alleged that a man named Keshav Bansal used photographs from a college acquaintance's private social media account with AI image-generation and editing tools to create obscene morphed images and upload them to anonymous Discord servers. The woman...

    Deployer: Synthetic media creators, Keshav Bansal, Deepfake creators · Harmed: Women and girls, Women, Victims of non-consensual deepfakes

    Latest report: Resentment leads techie to circulate fake obscene images of woman online (timesofindia.indiatimes.com)

    Awaiting classification
  15. #1712 · 1 report

    Northern Ireland Victim Reportedly Lost £250,000 in Investment Scam Using Purportedly AI-Generated Video of Unnamed Financial Personality AIID ↗

    A person in Ards and North Down, Northern Ireland, reportedly lost £250,000 in an investment scam that began with an apparently AI-generated video of an unnamed, well-known financial personality. Police said the victim was moved to WhatsApp, persuaded to make...

    Deployer: Synthetic media creators, Scammers, Impersonation scammers · Harmed: Victims of deepfake-enabled fraud, Unnamed victim in Ards and North Down, Northern Ireland, Public figures

    Latest report: Victim loses £250k after scammers use AI video of 'well-known' celebrity (bbc.com)

    Awaiting classification
  16. #1692 · 3 reports

    Parkview High School in Georgia Reportedly Received Series of Purportedly AI-Generated Bomb Threats That Prompted Repeated Lockdowns AIID ↗

    During the 2026–27 school year, Parkview High School in Lilburn, Georgia, reportedly received at least four AI-generated bomb threats, including masked phone calls that prompted repeated lockdowns or soft lockdowns. School police described the threats as follo...

    Deployer: Threat actors, Synthetic media creators · Harmed: Teachers, Parkview High School students and staff (Georgia), Parkview High School (Georgia)

    Latest report: Parkview High receives 4th AI-generated bomb threat this year (fox5atlanta.com)

    Awaiting classification
  17. #1675 · 2 reports

    Instinct AI Personal Assistant Reportedly Summarized an AI Product Founder's Retained Emails After Google Access Was Disconnected AIID ↗

    AI product founder Claire Vo reported that three hours after she disconnected Instinct from her Google account, the personal AI assistant summarized previously indexed emails. Vo said the Google connector was off, but Instinct had retained copies for later sea...

    Deployer: Spear Street Technology, Claire Vo, AI agent system deployers · Harmed: Privacy, Instinct users, Email account holders

    Latest report: Is Instinct safe to use? Three things to know before you sign up (us.norton.com)

    Awaiting classification
  18. #1674 · 1 report

    Instinct AI Personal Assistant Reportedly Sent Email From Moxxie Ventures Founder's Account Without Approval AIID ↗

    Moxxie Ventures founder Katie Jacobs Stanton reported that Instinct, a private-access AI personal assistant, sent an innocuous email from her connected account without checking with her first. Stanton said the unauthorized action broke her trust and led her to...

    Deployer: Katie Jacobs Stanton, AI agent system deployers · Harmed: Katie Jacobs Stanton, Instinct users, Email account holders

    Latest report: Instinct’s powerful AI assistant is raising privacy and security concerns (techcrunch.com)

    Awaiting classification
  19. #1688 · 4 reports

    Teenager in Quilmes, Argentina, Reportedly Consulted ChatGPT While Planning School Shooting Against Classmates AIID ↗

    Argentine authorities reported that a 15-year-old in Quilmes allegedly discussed a planned school shooting with ChatGPT, including tactical preparations, before an FBI alert prompted an investigation by the Argentine Federal Police. Police later seized phones...

    Deployer: Unnamed adolescent boy in Quilmes, Argentina, Students, School violence planners and assailants · Harmed: Victims of school violence planners and assailants, Teachers, Students

    Latest report: Un adolescente planificó con la Inteligencia Artificial matar a sus compañeros de colegio:... (clarin.com)

    Awaiting classification
  20. #1660 · 4 reports

    Purportedly AI-Generated Videos Impersonating Miami Immigration Attorney Were Reportedly Used to Defraud Bronx Resident of $4,820 AIID ↗

    Scammers reportedly used AI-generated videos impersonating Miami immigration attorney Angel Leal to solicit a Bronx legal resident seeking U.S. citizenship. The victim said he sent $4,820 through Zelle and provided Social Security and residency documents befor...

    Deployer: Synthetic Media Creators, Scammers Impersonating Angel Leal, Scammers, Deepfake Creators, Cybercriminals · Harmed: Victor Hernandez, Scam Victims, Immigrants In The United States, Immigrants, Financial Scam Victims, Angel Leal

    Latest report: Scammers use AI to impersonate immigration attorneys to dupe immigrants with fake legal se... (wlrn.org)

    Awaiting classification
  21. #1664 · 1 report

    Broadway Performer and SiriusXM Host Seth Rudetsky Reportedly Lost Facebook Page Access in Purportedly AI-Assisted Scam Impersonating Comedian Nikki Glaser AIID ↗

    Broadway performer and SiriusXM host Seth Rudetsky reportedly received a personalized invitation purportedly from comedian Nikki Glaser's podcast. After scammers guided him through Facebook permissions during a supposed technical setup, he lost access to his p...

    Deployer: Scammers, Cybercriminals · Harmed: Targets Of Fraudulent Professional Opportunities, Social Media Users, Seth Rudetsky, Public Figures, Nikki Glaser, Facebook Users, Epistemic Integrity, Companies

    Latest report: Inside the Fake Celebrity Podcast Scam Fooling Hollywood (hollywoodreporter.com)

    Awaiting classification
  22. #1663 · 2 reports

    Comedy Writer Bruce Vilanch Reportedly Sent Money in Purportedly AI-Assisted Scam Impersonating Fresh Air Host Terry Gross AIID ↗

    Comedy writer Bruce Vilanch reportedly received highly personalized messages impersonating Terry Gross, host of NPR's Fresh Air, and sent money after being asked to support NPR. He discovered the invitation was fraudulent when Gross did not appear for the sche...

    Deployer: Scammers, Scammers Impersonating Terry Gross · Harmed: Bruce Vilanch, Terry Gross, Whyy, Npr, Public Figures, Epistemic Integrity, Targets Of Fraudulent Professional Opportunities

    Latest report: ‘Too good to be true?’: No, WHYY’s Terry Gross did not personally email you to be a guest... (whyy.org)

    Awaiting classification
  23. #1665 · 3 reports

    Purportedly AI-Generated Article Falsely Depicted Australian Broadcasting Corporation Finance Presenter Alan Kohler Interviewing Reserve Bank Governor Michele Bullock to Promote Boulder Sparhaven AIID ↗

    An online article reportedly used AI-generated imagery to falsely depict Australian Broadcasting Corporation (ABC) finance presenter Alan Kohler interviewing Reserve Bank of Australia governor Michele Bullock about Boulder Sparhaven, a cryptocurrency trading p...

    Deployer: Synthetic Media Creators, Scammers In Australia, Scammers, Investment Scam Operators, Deepfake Creators In Australia, Deepfake Creators, Cybercriminals · Harmed: Victims Of Impersonation Scams, Michele Bullock, Investors, General Public Of Australia, General Public, Epistemic Integrity, Australian Investors, Alan Kohler

    Latest report: ASIC warns scammers are using AI to spin vast webs of deception (asic.gov.au)

    Awaiting classification
  24. #1659 · 2 reports

    Purported Hanover Institute for Public Policy Reportedly Targeted Chatbot Responses in Israeli Government-Backed Influence Campaign AIID ↗

    An Israeli government-backed communications campaign reportedly operated a website presenting itself as the Hanover Institute for Public Policy, despite reporting finding no corresponding established think tank. The site published material designed for chatbot...

    Deployer: Piro Inc., Israel Government Advertising Agency, Information Manipulation Actors In Israel, Information Manipulation Actors, Havas Media Germany Gmbh, Hanover Institute For Public Policy, Government Of Israel · Harmed: Public Discourse Integrity, Perplexity Users, General Public Of The United States, General Public, Epistemic Integrity, Chatgpt Users, Chatbot Users

    Latest report: Fake US thinktank set up and funded by Israel sought to game AI for propaganda (theguardian.com)

    Awaiting classification
  25. #1639 · 1 report

    Turkish National Reportedly Posted a Purportedly AI-Generated Image Depicting Himself with Eric Trump While Promoting Trump Hotel Dubai AIID ↗

    Turkish national Melih Göğebakan reportedly posted a purportedly AI-generated image on LinkedIn depicting himself alongside Eric Trump while promoting the Trump Hotel Dubai project. The image appeared amid a broader online persona in which Göğebakan allegedly...

    Deployer: Synthetic Media Creators, Scammers, Melih Gogebakan, Information Manipulation Actors, Deepfake Creators · Harmed: Public Figures, Eric Trump, Epistemic Integrity, American Public Figures

    Latest report: Kendini 'Trump'ın danışmanı' olarak tanıtan Türk vatandaşı gözaltına alındı (tr.euronews.com)

    Awaiting classification
  26. #1649 · 3 reports

    Meta AI Model Reportedly Exploited Security Vulnerability in Real Third-Party Service During Cybersecurity Evaluation AIID ↗

    During a Meta cybersecurity evaluation conducted with Irregular, one of Meta's AI models reportedly gained unintended Internet access after an evaluation-environment misconfiguration and exploited a vulnerability in a real third-party service. The model was re...

    Deployer: Meta, Irregular, Ai Agent System Deployers · Harmed: Targets Of Autonomous Ai Enabled Intrusion Operations

    Latest report: AI models are breaking out of their cages. Their creators are scrambling. (washingtonpost.com)

    Awaiting classification
  27. #1721 · 1 report

    Wisconsin U.S. Rep. Derrick Van Orden Reportedly Posted Grok Imagine Deepfakes Depicting Opponent Rebecca Cooke Saying Things She Did Not Say AIID ↗

    Wisconsin U.S. Rep. Derrick Van Orden repeatedly posted Grok Imagine-generated videos depicting Democratic challenger Rebecca Cooke saying statements she did not make. Cooke called the clips deceptive and defamatory; Van Orden's campaign described them as obvi...

    Deployer: Synthetic media creators, Public figures, Politicians in the United States · Harmed: Voters, Rebecca Cooke, Public figures

    Latest report: Cooke campaign sends cease-and-desist to Congressman Van Orden over AI deepfakes (wpr.org)

    Awaiting classification
  28. #1652 · 4 reports

    Granola AI Notetaker Allegedly Captured and Transcribed Florida Meeting Participant Without Notice or Consent AIID ↗

    Tarra Chamberlain, a Florida resident, alleged that Granola captured and transcribed her speech during a virtual meeting without her knowledge or consent after another participant used the AI notetaker. Her July 2026 lawsuit further alleged that Granola uses m...

    Deployer: Granola, Ai Transcription Tool Users · Harmed: Tarra Chamberlain, Privacy, People Recorded Without Consent

    Latest report: AI Note-Taking Tools, Silent Recording, and the Consent Problem: What the Granola Class Ac... (natlawreview.com)

    Awaiting classification
  29. #1629 · 15 reports

    Anthropic Research Model Reportedly Scanned 9,000 Targets and Compromised Real Company's Application During Evaluation AIID ↗

    During an Anthropic cybersecurity evaluation with Irregular, an internal research Claude model reportedly scanned roughly 9,000 internet targets after failing to reach its fictional target. It reportedly compromised a real company's Internet-facing application...

    Deployer: Irregular, Anthropic, Ai Evaluation Organizations, Ai Agent System Deployers · Harmed: Unidentified Companies Compromised During Anthropic Cybersecurity Evaluations Disclosed July 2026, Companies

    Latest report: Anthropic says its models went rogue and hacked 3 companies during testing (businessinsider.com)

    Awaiting classification
  30. #1628 · 15 reports

    Claude Mythos 5 Reportedly Published Malicious PyPI Package That Compromised Real Security Company During Evaluation AIID ↗

    During an Anthropic cybersecurity evaluation with Irregular, Claude Mythos 5 reportedly created and published a malicious Python package to PyPI while pursuing a fictional target. The package was reportedly available for about an hour and ran on 15 real system...

    Deployer: Irregular, Anthropic, Ai Evaluation Organizations, Ai Agent System Deployers · Harmed: Unidentified Companies Compromised During Anthropic Cybersecurity Evaluations Disclosed July 2026, Companies

    Awaiting classification

Browse all 1,708 incidents

Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.