AI Incident Database
Browse AI incidents
Every incident record (metadata only) from the weekly snapshot of 2026-09-07. Filter, then export the selection with its licence attached; each row links to the full record and its reports.
Filter incidents (1 active)
-
Threat Actor Reportedly Used Hermes AI Agent for Unattended Post-Compromise Activity in Thailand's Ministry of Finance Network AIID ↗
Hunt.io reported that an unidentified threat actor used Nous Research's Hermes agent in unattended "YOLO" mode during an intrusion targeting Thailand's Ministry of Finance. Recovered logs showed Hermes conducting privilege-escalation reconnaissance within ministry systems and recursively searching a directory containing personnel records. Researchers found evidence of compromise but no data exfiltration; the ministry had not publicly confirmed a breach.
-
Purportedly AI-Generated Facebook Pages Allegedly Targeted Australian Rules Football Club Geelong Cats With Fabricated Harmful Claims AIID ↗
Purportedly AI-generated Facebook pages reportedly published false stories about the Geelong Football Club, including fabricated criminal allegations, illnesses, deaths, and a nonexistent bushfire evacuation warning. The club reported the pages to Meta, which later removed at least one page after complaints, while other misleading content reportedly remained online.
-
Threat Actor Reportedly Used AI-Assisted Workflows to Compromise AWS Environment for Extortion AIID ↗
Sygnia reported that a threat actor apparently used purportedly AI-assisted or agentic workflows to move rapidly through an unidentified organization's AWS environment during an approximately 72-hour intrusion. The attacker allegedly expanded from an Internet-facing application into cloud infrastructure and data stores, reportedly stealing credentials and sensitive information while demonstrating the ability to disrupt services as leverage for extortion. Sygnia did not identify a specific model.
-
Discord's Automated Moderation System Reportedly Wrongfully Banned More Than 8,000 Users Over Benign Images AIID ↗
Discord reportedly wrongfully banned more than 8,000 accounts after its automated image-moderation workflow flagged harmless uploads, including grids, spreadsheets, chessboards, and game images, as prohibited material. Discord said a bug converted temporary upload restrictions into account bans and prevented cleared accounts from being restored automatically. The company later reinstated the affected accounts.
-
Waymo Robotaxi Reportedly Caught Fire After Driving Over Firework in San Francisco AIID ↗
An unoccupied Waymo robotaxi reportedly drove over a small firework near the 1200 block of Connecticut Street in San Francisco on July 4, 2026, and caught fire. No passengers were aboard and no injuries were reported. Waymo said it coordinated with the San Francisco Fire Department and local authorities to remove the damaged vehicle.
-
Istanbul Fraud Network Reportedly Used AI-Assisted Call Center Software to Impersonate Officials and Defraud Europeans AIID ↗
An international fraud network operating from a call center in Maslak, Istanbul reportedly used AI-assisted software to contact people in the Czech Republic and other European countries while posing as police, prosecutors, soldiers, and bank officials. Authorities said numerous victims were defrauded for substantial sums. Investigators found 80 foreign-national suspects at the call center and seized digital materials during raids at three Istanbul locations.
-
Purported Deepfake Impersonating Dubai Crown Prince Reportedly Used to Defraud Filipino Domestic Worker AIID ↗
A Filipino domestic worker identified as "Maria" reportedly paid ₱100,000 (about $1,625) after a scammer deployed purportedly manipulated real-time video to impersonate Dubai Crown Prince Hamdan bin Mohammed during WhatsApp calls. The scammer reportedly claimed the money was for a marriage certificate and "royal membership card" that would help her secure a job in Dubai. Maria reportedly ended contact after noticing that the Facebook account was based in Nigeria.
-
Suspected China-Linked Hackers Reportedly Used AI Agents to Compromise Taiwanese Government Systems and Exfiltrate Personnel Records AIID ↗
From July 1–4, 2026, suspected China-linked hackers reportedly used a multi-agent framework built on Hermes and OpenClaw to compromise Taiwanese government systems. The agents reportedly compromised 85 credentials and used persistent access to connected systems to exfiltrate more than 2,564 personnel records. Taiwan later confirmed an overseas AI-assisted campaign against government agencies, without attributing it to China.
-
City of Spokane Reportedly Distributed Purported AI-Generated Clocktower Flyer Resembling Graphic Designer Matthew Clinard's Artwork AIID ↗
A Spokane Parks and Recreation employee reportedly used a purported generative AI image tool to create a flyer promoting the restored Great Northern Clocktower chimes. The flyer reportedly reproduced elements of artist Matthew Clinard's commercially sold Clocktower sticker and was distributed by the mayor's office without the city-required AI disclosure. After Clinard complained publicly, the city removed the image and apologized, then began considering AI-policy and employee-training reforms.
-
Spokane, Washington, Police Reportedly Circulated Purported AI-Generated Image as Authentic Photo of Injured Dog AIID ↗
Detectives in Spokane, Washington, reportedly created a purported AI-generated image as a joke depicting a real undercover officer holding an injured dachshund. A supervisor reportedly mistook it for an authentic photograph and the image was released to news media after correcting an earlier claim that the dog had died. The Spokesman-Review published a cropped version before the department disclosed that the scene was fabricated and began reviewing its verification procedures.
-
LLM-Driven Ransomware Operator Dubbed JADEPUFFER Reportedly Targeted Production Database AIID ↗
Sysdig reported that a ransomware operator it dubbed JADEPUFFER used an LLM-driven agent to turn access through a vulnerable internet-facing Langflow deployment into a database-extortion operation. The report said the activity reached a production database server and produced concrete disruption, with the victim environment allegedly left in a damaged and unrecoverable state alongside a ransom demand.
-
Purportedly AI-Powered KT Platform Reportedly Used in Forced Scamming Operation Involving Trafficked Worker in Myanmar AIID ↗
AP reported that traffickers at Myanmar's Tai Chang scam compound forced a man named Safeer Mohammed Koorimannil to use the AI-powered KT platform to impersonate women and target thousands of people online. The system reportedly supported the scam conversations while monitoring worker performance. Koorimannil said he was beaten for poor results and later paid 500,000 rupees ($5,300) for his release.
-
DuckDuckGo Search Assist Reportedly Falsely Claimed Donald Trump and JD Vance Died of Rabies AIID ↗
DuckDuckGo's Search Assist reportedly produced an answer stating that Donald Trump and JD Vance had died of rabies and repeated fabricated details involving Robert F. Kennedy Jr. The answer cited a false WKNA49 article alongside an unrelated ABC News report. Reporting linked the episode to adversarial web content associated with r/poisonai. DuckDuckGo said Search Assist had been "deliberately tricked," fixed the result, and planned updates.
-
Rep. Anna Paulina Luna's Office Reportedly Published Claude Transcript Residue on Accident in House Amendment Summary AIID ↗
A staffer in Rep. Anna Paulina Luna's office reportedly used Claude to prepare a summary for an amendment to the FY2027 National Defense Authorization Act and accidentally pasted chatbot transcript residue, including a timestamp and "Claude responded:" marker, into the public House Rules Committee record. The summary was reportedly later corrected. Luna confirmed that her staff used Claude for the summary, not to draft the amendment itself.
-
Storm-1516 Reportedly Spread Fabricated Narratives Targeting Firebird Data Center in Armenia AIID ↗
Alethea reported that Storm-1516, a Russian influence operation, targeted Firebird's NVIDIA-powered data center under construction in Hrazdan, Armenia, with purportedly fabricated media narratives designed to make the project appear dangerous and economically unstable. The campaign allegedly used imitation tech-news articles to cast the facility as a liability for Armenia's infrastructure and Western-aligned technology ambitions.
-
Apartment Owner and Manager UDR Allegedly Used RealPage Algorithms to Set San Diego Rents in Keller v. UDR, Inc. AIID ↗
In Keller v. UDR, Inc., plaintiff Jacob Keller alleged that UDR used RealPage pricing tools to set rents or occupancy levels at its San Diego properties after a city prohibition took effect on June 21, 2025. The complaint claims the tools relied on nonpublic competitor data and contributed to inflated rents for UDR tenants. UDR, a large publicly traded apartment owner and operator, had previously acknowledged using YieldStar in decisions concerning certain multifamily units.
-
Zoox Autonomous Vehicle Reportedly Entered Smoke-Obscured Fire Scene, Prompting Heavy-Smoke Detection Recall AIID ↗
On June 20, 2026, an unoccupied Zoox autonomous vehicle reportedly entered an active fire scene after heavy smoke obscured its surroundings. The purported automated driving system braked hard while attempting to steer away and stopped before the vehicle was reversed under teleguidance. Zoox later recalled 105 vehicles and issued a software update intended to improve detection of and response to heavy smoke.
-
Tesla Driver Reportedly Said Driver-Assistance Mode Was Engaged During Fatal Texas Home Crash AIID ↗
On June 19, 2026, Michael Butler's Tesla Model 3 reportedly left the roadway in Katy, Texas, and struck a home at high speed, killing resident Martha Avila. Butler reportedly told investigators that an automated driving-assistance system was engaged. Tesla's Autopilot vice president reportedly later said Butler had manually overridden self-driving by fully depressing the accelerator. Local authorities and NHTSA have opened investigations.
-
Stow, Massachusetts, Police Officer Allegedly Used Flock License-Plate Reader System to Track Former Romantic Partner AIID ↗
A Stow, Massachusetts, police officer allegedly used Flock Safety’s automated license plate reader system and other law-enforcement databases to obtain information about a former romantic partner and track her movements. The woman said she had fled an abusive relationship and later obtained a restraining order. An internal investigation found repeated searches without legitimate law-enforcement reasons, and the department ended its Flock contract.
-
OpenAI AI Agent Reportedly Gained Unauthorized Access to Australian Medicare Statistics Portal During Research Task AIID ↗
An OpenAI AI agent conducting research into public medicine spending reportedly bypassed repeated access blocks and entered nonpublic areas of Australia's Medicare Statistics Reporting Service. Australian officials said it accessed public and nonpublic files and wrote files to an internal server; no personal Medicare information was known to have been accessed. OpenAI notified the Australian government.
-
Purported AI-Generated Advertisements Reportedly Falsely Depicted Lee Ji-hye Endorsing Food and Clothing Products AIID ↗
Purported AI-generated advertisements reportedly circulated online using South Korean singer and broadcaster Lee Ji-hye's likeness to falsely promote food and clothing products. Lee reportedly said she had no connection to the advertisements and warned followers not to click associated links or make purchases. No confirmed consumer losses were identified in available reporting.
-
Purported Deepfake of Taoiseach Micheál Martin Reportedly Promoted Quantum AI Investment Scam AIID ↗
A purported AI-generated video reportedly circulated on social media impersonating Taoiseach Micheál Martin and falsely claiming that a €250 investment could produce €40,000 in returns. Martin reportedly denounced the video as completely false and warned users to remain vigilant. The clip appeared to promote the Quantum AI scheme; no individual financial losses were identified in the available reporting.
-
AI incident: sexual content (Jun 2026) AIID ↗
An AI Incident Database record involving sexual content, dated 16 June 2026. Risk classification, related incidents and the laws on record for this risk area.
-
Purported AI-Generated Video Allegedly Contributed to Laredo, Texas, Teen's Death by Suicide AIID ↗
Laredo, Texas, police reported that a purported AI-generated video using an unnamed teenager's likeness was circulated online and allegedly contributed to emotional distress before the teenager died by suicide earlier in 2026. Authorities did not disclose further details about the video's production.
-
AI incident: sexual content (Jun 2026) AIID ↗
An AI Incident Database record involving sexual content, dated 14 June 2026. Risk classification, related incidents and the laws on record for this risk area.
Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.
Frequently asked questions
What is recorded in each incident?
What happened, when, who was involved as developer or deployer, who was harmed, the sectors and countries affected, and the domain and subdomain the harm falls under. Incidents are mirrored from the AI Incident Database and each links back to its source record.
Does an incident mean wrongdoing was proven?
No. These are reported incidents, not findings of liability. Entities named in a report are named as reported, allegations are marked as alleged, and nothing here is a legal determination.
How current is the incident data?
It syncs directly from the AI Incident Database several times a day, so a new incident usually appears within hours. Each record carries the date it was last synced, and the snapshot date is shown on the page.
Does this page include the full incident reports?
No. The report texts are outside the licence this data is shared under, so only the metadata and the classifications appear here. Every row links to the original incident record, which carries the reports themselves.