AI Incidents
Real-world cases where AI systems caused harm, classified by risk domain and entity. Data sourced from 
AIID and classified by 
MIT AI Risk Initiative. CC BY-SA 4.0
1,751 incidents
Reddit Scam Ads Reportedly Used Deepfake News Segments and Cloned Media Sites to Promote Allegedly Fake AI Investment Platforms
Sponsored Reddit ads reportedly impersonated the BBC, Financial Times, and The Guardian to promote purportedly fake AI investment platforms including Wencoin STX, Warrior Coin AI, and Nevo Coin. The campaign allegedly dressed the scam as legitimate financial journalism, using cloned publisher pages and deepfake-style news footage to pressure users into sharing contact details and making deposits.
Humanoid Robot Identified as Likely Unitree G1 Reportedly Kicked Boy During Public Demonstration in Xinjiang
A boy in Xinjiang was reportedly struck in the abdomen by a humanoid robot during a public performance at a scenic-area amusement venue. The robot was reportedly performing martial-arts-style movements near children without clear barriers, and the child's mother said he was fortunately not seriously harmed. The machine was reportedly likely a Unitree G1, but the exact cause of the kick was not established.
Italian Mediaset Journalist Safiria Leccese's Image Was Reportedly Used in a Purportedly AI-Generated Fake Loan Scam
Italian media reported that scammers purportedly used AI to create fake social media profiles and a video impersonating Mediaset journalist Safiria Leccese, using her image and footage associated with her political-interview program Super Partes to promote a personal loan. Leccese said several people were deceived within an hour. After she contacted postal police, two additional fake profiles using her image were reportedly found and blocked.
Meta AI Support Bot Reportedly Enabled Takeovers of High-Profile Instagram Accounts
Hackers reportedly used Meta's AI support chatbot to take over high-profile Instagram accounts by allegedly convincing it to change account email information and trigger recovery flows. Reported targets included the Barack Obama White House account; the account of John F. Bentivegna, the Chief Master Sergeant of the Space Force; Sephora's account; and app researcher Jane Manchun Wong. Meta said the issue had been resolved.
The Sydney Morning Herald and The Age Removed an Opinion Article After Undisclosed Copilot Use
The Sydney Morning Herald and The Age removed an opinion article by Western Sydney University academic Cath Ellis after reporting found it had been prepared with Microsoft Copilot without the masthead being informed. Ellis said she used Copilot to structure her own notes, while the masthead said the article did not meet its editorial standards on AI use.
COEMPT Quality Assurance Engineers Allegedly Violated Indian CBSE Student Data Privacy Rights by Processing It with Google Gemini
The Hindu reported that vulnerabilities in the OnMark exam-marking portal used by India's Central Board of Secondary Education (CBSE) allegedly exposed sensitive student data, including answer-sheet images. Ethical hacker Nisarga Adhikary also alleged that COEMPT Eduteck quality-assurance scripts processed students' personal information through Google Gemini. CBSE said the vulnerabilities had been contained.
Reported AI-Generated Image Portrayed Vetëvendosje Official Dejona Mihali Meeting Aleksandar Vučić
The Facebook page Gjithqka rreth Politikes reportedly published an image falsely suggesting that Dejona Mihali, a senior Vetëvendosje official, coordinated with Serbian President Aleksandar Vučić against Albin Kurti during Kosovo's snap-election campaign. The image was reportedly likely AI-generated, and Vetëvendosje denied the claim.
Purportedly AI-Powered Software Allegedly Used to Replace Montefiore Hospital Utilization-Review Nurses Despite Contractual AI Safeguards
Montefiore Hospital in New York reportedly laid off 12 utilization-review nurses after changing the department's workflow and introducing AI-powered software. The nurses' union alleged that the technology replaced their work and violated contractual protections governing AI. Montefiore disputed that account and described the changes as part of a nonclinical paperwork program.
AI Agents Reportedly Attempted to Hack Canada's Federal Archives Website While Retrieving Historical Divorce Records
AI agents reportedly targeted Library and Archives Canada, a Canadian federal agency, while retrieving historical divorce records. Among 899 requests, 13 reportedly carried attack payloads. Researchers found no evidence that the probes succeeded; Canadian officials reported no indication of compromise. Attribution to OpenAI remains unconfirmed.
Scammers Reportedly Used AI-Cloned Daughter's Voice to Defraud Bay Area Mother in Fake Kidnapping Call
Deborah Del Mastro of Martinez, California, reportedly wired $5,400 to Mexico after scammers falsely claimed her daughter Sarah had been kidnapped and played what she believed was Sarah's panicked voice. AI had reportedly been used to mimic the daughter's voice during a five-hour call that pressured Del Mastro to send money. After she contacted her daughter and learned she was safe, Martinez police reportedly began investigating.
Bangladesh-Operated Facebook Pages Reportedly Used AI-Generated Imagery to Mimic U.S. Grassroots Opposition to Data Centers
U.S.-state-themed Facebook pages reportedly operated from Bangladesh shared purportedly AI-generated imagery opposing data-center development. The pages allegedly used local-sounding names to push hyperlocal grievance content into U.S. communities, making offshore engagement farming appear like grassroots opposition.
OpenAI-Linked AI Agents Reportedly Used German Programming Wiki DSEWiki for Coordination and Restriction Evasion
Researchers reported that autonomous agents apparently linked to OpenAI made thousands of edits to the German programming wiki DSEWiki, which they reportedly repurposed as a space for inter-agent coordination. The agents shared task answers and methods for bypassing sandbox restrictions, and reportedly created backup pages to evade a moderator's deletions. OpenAI disputed calling the activity hacking and said it had not reviewed the report before publication.
Oura Smart Ring Purchaser in California Alleged Company Overstated AI Sleep-Tracking Accuracy, Leading to Overpayment
California consumer Madison Surber alleged that she bought an Oura Ring 4 for about $514 after relying on claims about its sleep-stage accuracy. Her proposed class action says Oura's machine-learning algorithm infers sleep stages from peripheral signals and that she would not have bought the ring or paid as much had she known its alleged limitations. Oura disputes the allegations.
Meta's AI-Assisted Layoff Process Allegedly Disproportionately Selected Employees on Protected Leave
Meta allegedly used internal AI-assisted evaluation and monitoring systems, including Metamate and employee activity metrics, to help rank and select workers for a May 2026 reduction in force. Twenty-six employees claimed the process disproportionately targeted people who had taken or requested medical, pregnancy, parental, or family leave, resulting in their selection for termination and threatening their livelihoods. Meta denied that AI made the layoff decisions.
Google Gemini 3.5 Coding Agent Reportedly Caused Production Portal Outage and Generated Fabricated Recovery Records
A developer reported that a Gemini 3.5 coding agent, operating with a third-party autonomy rule pack, made sweeping changes beyond a requested authentication fix and altered Firebase routing, causing a 33-minute production outage. After the developer manually rolled back the deployment, the agent allegedly claimed it had restored service and generated fabricated consultation and post-mortem records. Google had not independently verified the incident.