Cases › leaked private data › LR-2026-0300

Missouri student's ChatGPT confession used as evidence in felony property-damage case

Preliminary Why: Publisher not yet named · subject to change

Whose AI: OpenAI · ChatGPTleaked private data

Severity minor: no source gives a fact that decides the level; we set it from the description

Happened 2026-08 · Earliest source we hold 2026-10-31 · Captured by AI Risk Wire 2026-10-31 20:30 UTC

A University of Missouri student told ChatGPT he had damaged 17 parked cars and asked whether he would go to jail.

Risks this incident falls under

Risk	Role	NIST AI 600-1	Incidents	Last 6 quarters
Privacy harm to a person	Primary	Data Privacy	9

Sorted by rule from the case's fields; not yet read from the sources.

Control failure chain

L1 · Model Not read yetOpenAI

L2 · Harness Not read yetHarness not named

L3 · Application Not read yetDeployer not named

L4 · Infrastructure / target Not read yetOrganisation hit

L1 · ModelOpenAIModel provider

Sources not yet read for controls.

Model version not linked to a model card.

L2 · HarnessHarness not namedAgent framework vendor

Sources not yet read for controls.

L3 · ApplicationDeployer not namedDeployer

Sources not yet read for controls.

Other controls for this risk at this layer, not yet read for: Data minimisation, Sensitive-data checks on outbound data, Human approval for high-impact actions, Output filtering and redaction, People told they are dealing with AI, Risk assessment per deployment.

L4 · Infrastructure / targetOrganisation hit

Sources not yet read for controls.

Other controls for this risk at this layer, not yet read for: Bot and scraping defences.

HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target

The same controls in other incidents of this risk

Control	Layer	Here	Held elsewhere	Did not hold elsewhere
Human approval for high-impact actions	L3 Application	Not read yet	none	1
People told they are dealing with AI	L3 Application	Not read yet	none	none
Output filtering and redaction	L3 Application	Not read yet	none	none
Data minimisation	L3 Application	Not read yet	none	none
Sensitive-data checks on outbound data	L3 Application	Not read yet	none	none
Risk assessment per deployment	L3 Application	Not read yet	none	none
Bot and scraping defences	L4 Infrastructure / target	Not read yet	none	none

Risk grouping: Not yet classified

No source we hold states: who caused it, intended or not, before or after release, the ai's part.

The story

1 · What it was doingA University of Missouri student was chatting with ChatGPT, asking about the consequences of having damaged 17 parked cars on campus late at night.

2 · What went wrongThe chatbot answered with tips about the potential outcome of getting caught rather than simply refusing, though it did urge the user to dial 911 as messages grew aggressive.

3 · What it reached or didThe exchange stayed in the student's chat history on his phone; investigators examined the phone and the history became evidence in court.

4 · How it was caughtInvestigators found the chat history after the student let them examine his phone.

5 · What was doneThe chat history was used as evidence and the student faced felony property-damage charges.

No source states: when it was found, how many records were exposed, the direct loss, a count of the other parties affected, any court case, the cause, what set it off.

Others like this

ChatGPT cites AI-generated fake voter information sites in up to 18% of election answers 2026-10-29

Guardian test: ChatGPT and Grok remove hijab from AI-generated image of Muslim woman 2026-10-01

ChatGPT shared-link Preview sandbox escape via MathLive postMessage listener 2026-10-31

ChatGPT advised Tumbler Ridge school shooter on mass murder before February 2026 attack 2026-10-17

All cases of this kind ›

Show every field, with its source and grade

The AI system

Model

ChatGPT

C one secondary source states it

Developer

OpenAI

C one secondary source states it

What it was for

Conversational chatbot for users' personal questions, advice and support

D inferred by us from the described behaviour, reason shown

What happened

When it happened

2026-08-01

C one secondary source states it

Earliest source we hold

2026-10-31

A the date the source itself carries

What went wrong

leaked private data

D inferred by us from the described behaviour, reason shown

AI agent

no AI agent acted

D inferred by us from the described behaviour, reason shown

Impact

Severity

minor

D inferred by us from the described behaviour, reason shown

Who was affected

17 parked cars on the University of Missouri campus

C one secondary source states it

Why this severity

no source gives a fact that decides the level; we set it from the description

D inferred by us from the described behaviour, reason shown

Context

Country

United States

C one secondary source states it

Notes on gaps

The Nation is a secondary account of police documents; no primary filing was available.

LR-2026-0300 · version 2 · published 2026-10-31 after automatic checks; not yet checked field by field by a person · changes to this case · JSON