Artificial Intelligence Policy Tracker

AI Incident Database

Browse AI incidents

Every incident record (metadata only) from the weekly snapshot of 2026-09-07. Filter, then export the selection with its licence attached; each row links to the full record and its reports.

Filter incidents (1 active)

Two-letter code, e.g. US

Reset

306 incidents · page 9 of 13

  1. #1164 · 1 report

    Google Healthcare AI Model Med‑Gemini Allegedly Produces Non‑Existent 'Basilar Ganglia' Term in Published Output AIID ↗

    Google’s Med‑Gemini healthcare AI reportedly produced the non‑existent term "basilar ganglia" in public launch materials, conflating two distinct brain structures. The error reportedly appeared in both a blog post and an arXiv preprint. Google is reported to have initially edited the blog without acknowledgment, later calling it a typo.

    Deployer: Google · Developer: Google · Harmed: Patients Whose Care Could Be Affected By Undetected Ai Hallucinations, Medical Research Community Citing Or Using Erroneous Ai Outputs, Healthcare Professionals Relying On Aigenerated Diagnostic Content

  2. #1058 · 1 report

    Purported AI-Generated Deepfake Images of Katy Perry at 2024 Met Gala Circulate Widely AIID ↗

    Purported AI-generated images depicting Katy Perry attending the 2024 Met Gala circulated widely on social media, leading to public confusion about her presence at the event. The images were realistic enough to deceive fans and even Perry’s mother, who believed them to be authentic. Perry publicly clarified the images were fake, attributing them to AI and noting she had missed the event due to work.

    Deployer: Unknown · Developer: Deepfake Technology Developers · Harmed: Katy Perry, General Public, Fans Of Katy Perry, Epistemic Integrity

  3. #898 · 2 reports

    Alleged LLMjacking Targets AI Cloud Services with Stolen Credentials AIID ↗

    Attackers reportedly exploited stolen cloud credentials obtained through a vulnerable Laravel system (CVE-2021-3129) to allegedly abuse AI cloud services, including Anthropic’s Claude and AWS Bedrock, in a scheme referred to as “LLMjacking.” The attackers are said to have monetized access through reverse proxies, reportedly inflating victim costs to as much as $100,000 per day. Additionally, they allegedly bypassed sanctions, enabled LLM models, and evolved techniques to evade detection and logg

    Deployer: Llmjacking Attackers Exploiting Laravel, Entities Engaging In Russian Sanctions Evasion · Developer: Oai Reverse Proxy Tool Creators, Llmjacking Reverse Proxy Tool Creators · Harmed: Laravel Users, Laravel Cve 2021 3129 Users, Cloud Llm Users, Cloud Llm Service Providers

  4. #1463 · 1 report

    Purported Deepfake Facebook Advertisement Reportedly Used Bulgarian Actor, Director, and Playwright Kamen Donev's Likeness to Market Joint-Pain Product AIID ↗

    A reportedly AI-manipulated Facebook advertisement appeared to repurpose footage of Bulgarian actor, director, and playwright Kamen Donev, allegedly overlaying fabricated audio and altered lip movements to market a purported joint-pain product. The ad reportedly linked to a presumably fabricated article imitating a Bulgarian news outlet and to an online sales funnel for a product described as unavailable through pharmacies.

    Deployer: Scammers · Developer: Deepfake Technology Developers, Synthetic Audio Generation Technology Developers · Harmed: People Seeking Medical Advice, Kamen Donev, Epistemic Integrity, General Public, General Public Of Bulgaria

  5. #1462 · 1 report

    Purported Deepfake Facebook Advertisement Reportedly Used Bulgarian Actor and TV Host Mihail Bilalov's Likeness to Market Joint-Pain Product AIID ↗

    A reportedly AI-manipulated Facebook advertisement appeared to repurpose footage of Bulgarian actor and television host Mihail Bilalov, overlaying purportedly fabricated audio and altered lip movements to market an alleged joint-pain product. The ad reportedly linked to a fabricated article imitating a Bulgarian news outlet and to an online sales funnel for a product described as unavailable through pharmacies.

    Deployer: Scammers · Developer: Deepfake Technology Developers, Synthetic Audio Generation Technology Developers · Harmed: People Seeking Medical Advice, Mihail Bilalov, Epistemic Integrity, General Public, General Public Of Bulgaria

  6. #823 · 3 reports

    Cybercheck Tool Allegedly Provides Questionable Evidence in Murder Trials AIID ↗

    Global Intelligence's Cybercheck AI tool, used by law enforcement to track suspects based on open source data, has allegedly been providing inaccurate or unverifiable evidence in several murder trials. Reportedly the tool lacks transparency and often produces unreliable reports, which has prompted prosecutors to withdraw Cybercheck evidence from multiple cases after its findings were challenged, reportedly wasting law enforcement time and resources while undermining prosecutors' cases.

    Deployer: Global Intelligence, Cybercheck · Developer: Global Intelligence, Cybercheck · Harmed: Phillip Mendoza, Sergio Cerna, Unnamed Aurora Colorado Residents, Mississippi Bureau Of Investigation, Four Unnamed Summit County Ohio Men, Unnamed Boulder County Colorado Resident, Ohio Bureau Of Criminal Investigation, Yakima County Sheriff'S Office

  7. #678 · 1 report

    Purported ChatGPT Factual Errors Reportedly Led to Filing of Complaint of GDPR Privacy Violation AIID ↗

    The activist organization noyb, founded by Max Schrems, reportedly filed a complaint in Europe against OpenAI alleging that ChatGPT violates the General Data Protection Regulation (GDPR) by providing inaccurate personal information such as birthdates about individuals.

    Deployer: Chatgpt · Developer: Openai, Large Language Model Developers · Harmed: Noyb, Max Schrems, General Public, Privacy

  8. #677 · 1 report

    ChatGPT and Perplexity Reportedly Manipulated into Breaking Content Policies in AI Boyfriend Scenarios AIID ↗

    The "Dan" ("Do Anything Now") AI boyfriend is a trend on TikTok in which users appear to regularly manipulate ChatGPT to adopt boyfriend personas, breaching content policies. ChatGPT 3.5 is reported to regularly produce explicitly sexual content, directly violating its intended safety protocols. GPT-4 and Perplexity AI were subjected to similar manipulations, and although they exhibited more resistance to breaches, some prompts were reported to break its guidelines.

    Deployer: Tiktok Users, Julia Munslow, Chatgpt, Gpt 3.5, Gpt 4, Perplexity Ai · Developer: Openai, Perplexity.Ai · Harmed: General Public, Openai, Perplexity Ai

  9. #712 · 2 reports

    Meta AI Hallucinates Harassment Allegations Against New York Politicians AIID ↗

    Meta's AI chatbot in Facebook Messenger falsely accused multiple state lawmakers of sexual harassment, fabricating incidents, investigations, and consequences that never occurred. These fabricated stories, discovered by City & State, sparked outrage among the affected lawmakers and raised concerns about the reliability of the chatbot. Meta acknowledged the errors and committed to ongoing improvements.

    Deployer: Meta · Developer: Meta, Facebook Users · Harmed: New York Lawmakers, Meta, Kristen Gonzalez, Facebook Users, Clyde Vanel

  10. #711 · 2 reports

    NHTSA Opens New Probe into Tesla’s Autopilot Following More than a Dozen Fatal Accidents AIID ↗

    The NHTSA has linked Tesla's Autopilot to over a dozen fatalities and hundreds of crashes, prompting a new investigation into the adequacy of Tesla's December recall of 2 million vehicles. The probe reports that Tesla’s driver-assist system led to avoidable crashes involving visible hazards, suggesting a critical safety gap between driver expectations and the system’s capabilities. The investigation will assess if Tesla’s recall remedies were sufficient to address these safety risks.

    Deployer: Tesla, Tesla Drivers · Developer: Tesla · Harmed: Tesla Drivers, Drivers, General Public

  11. #838 · 1 report

    Microsoft Copilot Allegedly Provides Unsafe Medical Advice with High Risk of Severe Harm AIID ↗

    Microsoft Copilot, when asked medical questions, was reportedly found to provide accurate information only 54% of the time, according to European researchers (citation provided in editor's notes). Analysis by the researchers reported that 42% of Copilot's responses could cause moderate to severe harm, with 22% of responses posing a risk of death or severe injury.

    Deployer: Microsoft Copilot, Microsoft · Developer: Microsoft · Harmed: People Seeking Medical Advice, Microsoft Copilot Users, General Public

  12. #722 · 1 report

    Catholic AI Chatbot 'Father Justin' Claimed to Be a Real Priest, Prompting Retraction AIID ↗

    Catholic advocacy group Catholic Answers released an AI priest called "Father Justin," which misleadingly claimed to be a real clergy member, offered sacraments, and provided controversial advice. After receiving criticism, the group rebranded the chatbot as a lay theologian to correct the misrepresentation. The incident is an instructive case with respect to deploying AI in sensitive contexts and the potential for causing confusion and harm.

    Deployer: Catholic Answers · Developer: Catholic Answers · Harmed: General Public, Catholics

  13. #1024 · 1 report

    Kenyan Journalist Jeff Koinange Depicted Endorsing Gambling App in Purported AI-Generated Deepfake AIID ↗

    A viral video purportedly manipulated by AI shows Kenyan journalist Jeff Koinange endorsing a mobile gambling app. The video was reportedly created using AI deepfake techniques, uses footage from a legitimate news broadcast, and artificially alters Koinange's voice and mouth movements. Neither Koinange nor Citizen TV has promoted the app, and no legitimate source hosts the video.

    Deployer: Scammers Impersonating Jeff Koinange, Scammers · Developer: Deepfake Technology Developers · Harmed: Jeff Koinange, General Public Of Kenya

  14. #685 · 1 report

    The WHO's S.A.R.A.H. Bot Reported to Provide Inconsistent and Inadequate Health Information AIID ↗

    The WHO's AI-powered health advisor, S.A.R.A.H. (Smart AI Resource Assistant for Health), is alleged to provide inconsistent and inadequate health information. The bot reportedly gives contradictory responses to the same queries, fails to offer specific contact details for healthcare providers, and inadequately handles severe mental health crises, often giving irrelevant or unhelpful advice.

    Deployer: Who, S.A.R.A.H. (Smart Ai Resource Assistant For Health) · Developer: Who · Harmed: General Public, People Seeking Medical Advice

  15. #676 · 6 reports

    Alleged Deepfake Audio Depicts Philippines President Ferdinand Marcos Jr. Ordering Military Action AIID ↗

    A purported deepfake audio clip portraying Philippine President Ferdinand Marcos Jr. ordering an attack on China spread online in July 2024, fueling tensions in the West Philippine Sea. The Presidential Communications Office reportedly debunked it as fake, attributing it to foreign actors.

    Deployer: Unknown Actors Targeting Ferdinand Marcos Jr., Unknown Actors · Developer: Deepfake Technology Developers, Synthetic Audio Generation Technology Developers · Harmed: Philippines China Relations, Philippines, Government Of The Philippines, General Public Of The Philippines, General Public Of China, General Public, Ferdinand Marcos Jr.

  16. #784 · 1 report

    AI incident: sexual content (Apr 2024) AIID ↗

    An AI Incident Database record involving sexual content, dated 23 April 2024. Risk classification, related incidents and the laws on record for this risk area.

    Deployer: Unknown Dark Web Users, Deepfake Creators · Developer: Unknown Ai Developers, Deepfake Creators · Harmed: Minors

  17. #792 · 10 reports

    Unauthorized Use of AI to Replicate Tupac Shakur's and Snoop Dogg's Voices in Drake's 'Taylor Made Freestyle' AIID ↗

    Drake released a song, "Taylor Made Freestyle," featuring AI-generated voices of Tupac Shakur and Snoop Dogg. The unauthorized replication of Tupac’s voice without the estate's consent led to a cease-and-desist order.

    Deployer: Drake · Developer: Deepfake Technology Developers · Harmed: Tupac Shakur, Estate Of Tupac Shakur, Snoop Dogg

  18. #1183 · 1 report

    Purported Error by Grok Reportedly Misrepresents Basketball Slang as Criminal Allegation Against NBA Player AIID ↗

    X's Grok AI bot reportedly generated a trending story falsely claiming that Golden State Warriors guard Klay Thompson was under investigation for vandalizing homes with bricks in Sacramento. The alleged fabrication appeared after Grok reportedly misinterpreted posts describing Thompson "shooting bricks" during a basketball game. The story reportedly ranked #5 briefly on X's trending list.

    Deployer: Xai · Developer: Xai · Harmed: X (Twitter) Users, Nba Fans, Klay Thompson, Golden State Warriors

  19. #737 · 2 reports

    Amandine Le Pen Deepfake Account Misleads Thousands on TikTok AIID ↗

    A TikTok account, "Amandine Le Pen," created using AI deepfake technology, impersonated a fictional niece of Marine Le Pen, amassing over 30,000 followers. The account spread pro-RN messages and solicited donations, misleading users and exploiting political influence. Visual inconsistencies revealed the deepfake, raising concerns about AI misuse for political manipulation, identity theft, and violation of personal rights, especially with similar accounts proliferating, such as "Lena Maréchal Lep

    Deployer: Unknown Tiktok User · Developer: Deepfake Creators · Harmed: Le Pen Family, French General Public

  20. #710 · 1 report

    Facebook AI Reportedly Mislabels Auschwitz Photos as 'Bullying' and 'Nudity' AIID ↗

    Facebook's AI system allegedly mislabeled around 20 posts from the Auschwitz Memorial Museum as violating community standards for "bullying" and "nudity," reportedly deleting at least one image of orphans. The purported misclassification of historical content allegedly prompted outrage from the museum, which reportedly demanded an explanation. Meta later purportedly apologized, attributing the issue to mistaken notices sent by its AI system and reportedly acknowledged that the posts did not, in

    Deployer: Meta · Developer: Meta · Harmed: Survivors Of Holocaust Victims, General Public, Auschwitz Memorial Museum

  21. #847 · 1 report

    Brake Failure in Reportedly AI-Driven Tram Leads to Multiple Injuries in Saint Petersburg, Russia AIID ↗

    During a test run in Saint Petersburg in Russia a reportedly AI-powered "Smart Tram" failed, leading to a crash that injured several pedestrians and trapped a woman under its wheels. The tram's AI system reportedly shut off unexpectedly, and both primary and emergency brakes failed despite pre-test checks.

    Deployer: Saint Petersburg Government · Developer: Uraltransmash, Ai Cognitive Technologies · Harmed: Saint Petersburg Pedestrians

  22. #936 · 1 report

    Deepfake of Former Prime Minister of Malta Joseph Muscat Allegedly Promotes Nord Invest Scam AIID ↗

    A reported doctored video falsely depicts former Maltese Prime Minister Joseph Muscat promoting the crypto platform Nord Invest. The manipulated footage, originally from a 2013 Sky News interview, was overlaid with AI-generated audio to mimic Muscat’s voice endorsing a fraudulent scheme. The video was reportedly shared through Facebook.

    Deployer: Unknown Scammers Impersonating Joseph Muscat, Scammers · Developer: Deepfake Technology Developers, Synthetic Audio Generation Technology Developers · Harmed: Joseph Muscat, General Public Of Malta

  23. #1717 · 5 reports

    Flock Safety License-Plate Reader Reportedly Misread Plate, Leading Toledo, Ohio, Police to Stop Motorist at Gunpoint and Deploy K-9 AIID ↗

    Toledo, Ohio, police stopped motorist Brandon Upchurch at gunpoint after a Flock Safety license-plate reader incorrectly matched his truck to a stolen plate. Officers released a K-9 that bit him and arrested him. Police later said the alert was a misread; one officer was reprimanded for failing to verify the plate, and all charges against Upchurch were later dropped.

    Deployer: Toledo Police Department, Police departments in the United States, Law enforcement, Adrian Wilson · Developer: Surveillance technology developers, Flock Safety, Automated license plate reader (ALPR) developers · Harmed: Road users, Motorists, Individuals mistakenly detained by law enforcement, Epistemic integrity, Drivers, Brandon Upchurch

  24. #1716 · 1 report

    Former Coffee County, Georgia, Deputy Allegedly Used Flock Safety License-Plate Reader System to Track Woman AIID ↗

    Coffee County, Georgia, prosecutors allege former sheriff's deputy Chris Ashley Rozar used the department's Flock Safety license-plate reader system and other law-enforcement databases for personal purposes, including tracking and surveilling a woman without her consent in April–May 2024. A 2026 grand-jury indictment charged him with stalking, computer invasion of privacy, misuse of captured license-plate data, and violation of oath.

    Deployer: Stalkers, Law enforcement, Coffee County Sheriff's Office (Georgia), Chris Ashley Rozar · Developer: Surveillance technology developers, Flock Safety, Automated license plate reader (ALPR) developers · Harmed: Women and girls, Women, Victims of stalking, Unnamed woman allegedly tracked by Chris Ashley Rozar, Privacy, Individuals whose license plate data were accessed for non-law-enforcement purposes, Individuals subjected to unauthorized surveillance

  25. #1100 · 3 reports

    Reported Audio Deepfake Impersonating CEO Karim Toubba Targets LastPass Employee via WhatsApp AIID ↗

    A LastPass employee was reportedly targeted by an audio deepfake impersonating CEO Karim Toubba via WhatsApp. The message used voice-cloning AI in a social engineering attempt to create urgency and bypass security protocols. The employee recognized red flags, reported the incident, and no breach occurred. LastPass shared the incident publicly to raise awareness about deepfake-driven fraud campaigns targeting executives and companies.

    Deployer: Unknown Scammer Impersonating Karim Toubba, Scammers · Developer: Deepfake Technology Developers, Synthetic Audio Generation Technology Developers · Harmed: Karim Toubba, Lastpass Employee, Employees Of Lastpass, General Public

Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.

Frequently asked questions

What is recorded in each incident?

What happened, when, who was involved as developer or deployer, who was harmed, the sectors and countries affected, and the domain and subdomain the harm falls under. Incidents are mirrored from the AI Incident Database and each links back to its source record.

Does an incident mean wrongdoing was proven?

No. These are reported incidents, not findings of liability. Entities named in a report are named as reported, allegations are marked as alleged, and nothing here is a legal determination.

How current is the incident data?

It syncs directly from the AI Incident Database several times a day, so a new incident usually appears within hours. Each record carries the date it was last synced, and the snapshot date is shown on the page.

Does this page include the full incident reports?

No. The report texts are outside the licence this data is shared under, so only the metadata and the classifications appear here. Every row links to the original incident record, which carries the reports themselves.