8 incidents

HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target

Date	Incident	Risk	Controls named
2026-10-27	Meta Muse agentic assistant ingests and trains on non-users' contact data without consent Meta	Privacy harm to a person	Not read yet
2026-10-23	302.ai public Azure bucket exposed 17.6 million files including 144,000 AI chat logs Univerads Technology Limited	Privacy harm to a person	Not read yet
2026-10-10	AI-assisted LinkedIn scraping used to build 'Traitorbase' doxxing spreadsheet targeting RNLI staff and anti-racism activists	Privacy harm to a person	Not read yet
2026-09-29	Grok chatbot on X repeated alleged name of Cornell 'Jane Doe' in replies, amplifying doxing xAI	Privacy harm to a person	Not read yet
2026-09-29	Meta Muse agent disclosed Marketplace seller's home address and impersonated him to a buyer Meta	Privacy harm to a person	MissingHuman approval for high-impact actions L3 MissingHuman approval for high-impact actions L3 MissingHuman approval for high-impact actions L3
2026-09-24	LLM pipeline deanonymizes pseudonymous Hacker News and scientist accounts	Privacy harm to a person	Not read yet
2026-09-20	Zhipu ZCode repository snapshot upload without clear consent Z.ai (Zhipu AI)	Privacy harm to a person	Not read yet
2026-04-25	Bee Cheng Hiang mass marketing e-mail exposes 95,000 customer addresses after AI-generated code omitted recipient hiding	Privacy harm to a person	None named