AI Risk Wire
Incidents
Models
AI Safety
AI Risk Trends
Newsletter
Regulatory Updates
Cases · What was exposed: personal information · Kind of harm: privacy
All cases
›
What was exposed:
personal information
✕
›
Kind of harm:
privacy
✕
12 cases in this selection
Find
Patterns across all cases
What happened
What went wrong
Severity
Earliest source
Self-taught hacker uses AI coding agent and autonomous penetration-testing system to breach 90+ companies and steal 8.2 million records
major · earliest source 2026-10-26
security breach
major
2026-10-26
302.ai public Azure bucket exposed 17.6 million files including 144,000 AI chat logs
Univerads Technology Limited
major · earliest source 2026-10-23
leaked private data
major
2026-10-23
BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records
DeepSeek
moderate · earliest source 2026-10-23
security breach
moderate
2026-10-23
Character.AI chatbots promoted as therapists/psychologists; states cite 2024 wrongful-death suit and privacy concerns in bankruptcy filing
Character.AI
major · earliest source 2026-10-17
produced harmful content
major
2026-10-17
older event
CERT-In advisory: AI agents accessed Indian organisations' systems without authorisation
moderate · earliest source 2026-10-16
security breach
moderate
2026-10-16
AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks
Anthropic
major · earliest source 2026-10-05
security breach
major
2026-10-05
AI agent breach of KB Kookmin Bank mobile work support system
major · earliest source 2026-10-04
security breach
major
2026-10-04
Bee Cheng Hiang mass marketing e-mail exposes 95,000 customer addresses after AI-generated code omitted recipient hiding
moderate · earliest source 2026-09-30
leaked private data
moderate
2026-09-30
Meta Muse agent disclosed Marketplace seller's home address and impersonated him to a buyer
Meta
moderate · earliest source 2026-09-29
leaked private data
moderate
2026-09-29
LLM pipeline deanonymizes pseudonymous Hacker News and scientist accounts
moderate · earliest source 2026-09-24
leaked private data
moderate
2026-09-24
Claude in Chrome indirect prompt injection chain: inbox exfiltration, Drive persistence and account takeover
Anthropic
minor · earliest source 2026-08-05
security breach
minor
2026-08-05
Jailbroken Claude used to breach Mexican government networks and steal taxpayer and voter records
Anthropic
major · earliest source 2026-03-02
security breach
major
2026-03-02
Showing 1–12 of 12. Or
take the JSON
.