Cases · How the AI was used: built into a product

Patterns across all cases

What happened	What went wrong	Severity	Earliest source
Tesla Cybercab strikes water-filled pothole on first reported crash Teslaminor · earliest source 2026-10-21	operational mistake	minor	2026-10-21
AI-generated 'Xiaohai' teen persona used to sell products to older women via fabricated sob storiesmoderate · earliest source 2026-10-20	produced harmful content	moderate	2026-10-20
Grok chatbot on X repeated alleged name of Cornell 'Jane Doe' in replies, amplifying doxing xAImajor · earliest source 2026-10-18	leaked private data	major	2026-10-18
Nude deepfakes of Austrian MEP Lena Schilling and 49 other MEPs circulated onlinemajor · earliest source 2026-10-18	produced harmful content	major	2026-10-18
Deepfake investment-scam ads impersonating Nigerian public figures on Facebookmoderate · earliest source 2026-10-08	other	moderate	2026-10-08
Prompt-injected email assistant summary pushes employee toward fraudulent vendor paymentmoderate · earliest source 2026-10-07	security breach	moderate	2026-10-07
Indirect prompt injection of AI email summarizer via forged header blocks in plain viewnegligible · earliest source 2026-10-05	security breach	negligible	2026-10-05
Guardian test: ChatGPT and Grok remove hijab from AI-generated image of Muslim woman OpenAImoderate · earliest source 2026-10-01	produced harmful content	moderate	2026-10-01
Bee Cheng Hiang mass marketing e-mail exposes 95,000 customer addresses after AI-generated code omitted recipient hidingmoderate · earliest source 2026-09-30	leaked private data	moderate	2026-09-30
Meta Muse agent disclosed Marketplace seller's home address and impersonated him to a buyer Metamoderate · earliest source 2026-09-29	leaked private data	moderate	2026-09-29
Zhipu ZCode repository snapshot upload without clear consent Z.ai (Zhipu AI)moderate · earliest source 2026-09-20	leaked private data	moderate	2026-09-20
Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltrationmajor · earliest source 2025-08-27	security breach	major	2025-08-27
Amazon Q Developer VS Code extension shipped an injected prompt instructing the agent to wipe files and AWS resources Amazonmajor · earliest source 2025-07-23	security breach	major	2025-07-23