2 incidents

Control: Route to a person and opt-out Outcome: Did not exist

EffectiveNot effectiveNot effective (bypassed)Did not existNot stated in sourcesNot yet checkedAttacker's ownOrder: model · harness · application · target

Date	Incident	Risk	Where it failed	Controls mentioned in sources
2026-06-01	Hackers take over Instagram accounts by tricking Meta AI support chatbot	Credential and privilege abuse		Did not existConfirmation after untrusted input L2 Did not existRoute to a person and opt-out L3
2026-05-03	Shoppers falsely identified by Facewatch facial recognition in UK stores Facewatch	Privacy harm to a person		Did not existRoute to a person and opt-out L3