Corrections
A published case is never edited. Every change makes a new version and is listed here with its reason, newest first. JSON
744 changes to 213 cases; the latest was on 2026-10-25.
Reviewer corrections 357Rebuilt from sources 112Merges of duplicates 91Other changes 87Fields added by a model 40Retractions 34Confidence grades lowered 21Name spelling 2
| Date | Case | What changed | By |
|---|---|---|---|
| 2026-10-20 | Cursor coding agent deletes PocketOS production database and backups LR-2026-0095 · version 7 → 8 | Absorbed LR-2026-0132. | Srini Iyer |
| 2026-10-20 | Replit AI agent deleted SaaStr's production database during a declared code freeze and stated rollback was impossible LR-2025-0031 · version 9 → 10 | Absorbed LR-2026-0093. | Srini Iyer |
| 2026-10-20 | Agent swarm attributed to OpenAI published thousands of RubyGems packages, gained RCE on RubyDoc.info, and attempted API-key theft LR-2026-0032 · version 7 → 8 | Confidence grades lowered on 2026-09-30 (grade A needs a cited primary source; a field with no verbatim citation is D): date disclosed A to C; detection method A to B. What was changed: related cases Stored textregraded by grade rules, 2026-09-30: event.date_disclosed A->C; event.detection_method A->B. A needs a cited primary source; a field with no verbatim citation is D | Automatic rebuild |
| 2026-10-20 | OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions LR-2026-0003 · version 11 → 12 | Rebuilt from its cited sources on 2026-10-19. What was changed: related cases Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-19 | Automatic rebuild |
| 2026-10-20 | Replit AI agent deleted SaaStr's production database during a declared code freeze and stated rollback was impossible LR-2025-0031 · version 8 → 9 | Rebuilt from its cited sources on 2026-10-20. What was changed: the evidence, industry, when it was found, what it did and 28 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-20 | Automatic rebuild |
| 2026-10-19 | LLM pipeline deanonymizes pseudonymous Hacker News and scientist accounts LR-2026-0061 · version 3 → 4 | Rebuilt from its cited sources on 2026-10-19. What was changed: country, the evidence, industry, shared exposure and 25 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-19 | Automatic rebuild |
| 2026-10-19 | OpenAI evaluation agents compromised Hugging Face production infrastructure while seeking ExploitGym solutions LR-2026-0003 · version 10 → 11 | Rebuilt from its cited sources on 2026-10-19. What was changed: rules and legal action, shared model, when it was found, when it happened and 33 more Stored textaggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-19 | Automatic rebuild |
| 2026-10-18 | AI agent allegedly deleted entire season of Swedish reality show The Challenge Sverige LR-2026-0200 · version 2 → 3 | Merged into LR-2026-0185: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | AI agent deletes finished season edit of Swedish 'The Challenge' weeks before release LR-2026-0186 · version 2 → 3 | Merged into LR-2026-0185: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | NHTSA evaluates petition that Tesla robotaxis speed in school zones LR-2026-0174 · version 2 → 3 | Merged into LR-2026-0173: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | Anthropic Claude Haiku 4.5 agent submits false homicide tip to Philadelphia Police Department website LR-2026-0172 · version 2 → 3 | Merged into LR-2026-0152: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | ARTEX AI tool used in breach of 68,000 identities at South Korean financial institutions LR-2026-0171 · version 2 → 3 | Merged into LR-2026-0140: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | Kentucky Attorney General lawsuit over Character.AI chatbot harmful health and self-harm advice LR-2026-0170 · version 2 → 3 | Merged into LR-2026-0147: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | Anthropic AI agent files false murder tip with Philadelphia Police Department LR-2026-0164 · version 2 → 3 | Merged into LR-2026-0152: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | Anthropic Claude model submitted false homicide tip to Philadelphia police website LR-2026-0163 · version 2 → 3 | Merged into LR-2026-0152: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | Kentucky lawsuit alleges Character.AI chatbots gave self-harm and extreme-dieting advice to users including minors LR-2026-0162 · version 2 → 3 | Merged into LR-2026-0147: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | AI agent used by attacker to breach seven South Korean financial firms LR-2026-0159 · version 2 → 3 | Merged into LR-2026-0140: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | China-based actor used ARTEX autonomous penetration-testing agent and Claude Code against South Korean banks LR-2026-0146 · version 2 → 3 | Merged into LR-2026-0140: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | AI agents used to breach South Korean financial firms, exposing 68,000+ customers LR-2026-0144 · version 2 → 3 | Merged into LR-2026-0140: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | Wrongful-death lawsuit alleging ChatGPT suicide conversations with 16-year-old Adam Raine LR-2026-0143 · version 2 → 3 | Merged into LR-2026-0098, which was later retracted. The incident is not counted as a case. | Automatic rebuild |
| 2026-10-18 | ARTEX AI-powered penetration-testing campaign against South Korean financial organizations LR-2026-0141 · version 2 → 3 | Merged into LR-2026-0140: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | Suspected AI-driven credential-stuffing campaign against South Korean banks (ARTEX AI) LR-2026-0134 · version 2 → 3 | Merged into LR-2026-0140: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | AI agent repurposed from white-hat security tool used in cyberattacks on seven Korean financial institutions LR-2026-0128 · version 2 → 3 | Merged into LR-2026-0140: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | Bee Cheng Hiang AI-generated mass-email script exposes 95,000 customers' addresses LR-2026-0120 · version 3 → 4 | Merged into LR-2026-0106: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | Replit agent deleted a production database during an unsupervised run LR-2026-0119 · version 2 → 3 | Merged into LR-2025-0031: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | AI agent breach of Spanish organization's system confirmed by AEPD LR-2026-0077 · version 4 → 5 | Merged into LR-2026-0059: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | Spain's first AI-agent-linked data breach notification (AEPD) LR-2026-0076 · version 4 → 5 | Merged into LR-2026-0059: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | Z.ai ZCode client silently uploaded user project data to Alibaba Cloud storage LR-2026-0052 · version 6 → 7 | Merged into LR-2026-0050: this record described the same incident and its sources are included there. It no longer counts as a separate case. | Automatic rebuild |
| 2026-10-18 | Hackers override internet-connected supermarket freezer thermostats across France, spoiling food and sparking fires LR-2026-0205 · version 2 → 3 | Retracted: no AI system, model or agent is named in the title or summary. Source sentence: "In a “bizarre and unprecedented” cyber-attack, hackers had remotely overridden the temperature settings on thousands of freezers, fridges and chiller cabinets pushing them from as low as -27C (-16.6F) to well over 50C (122F)." Approved by Srini Iyer on 2026-10-18 in the corrections review. | Srini Iyer |
| 2026-10-18 | NEAR Intents Omni deposit/withdrawal bug drained $3.87M USDT treasury contract LR-2026-0145 · version 2 → 3 | Retracted: listed in verdicts. Source sentence: "A bug in the Omni deposit and withdrawal infrastructure let an attacker drain roughly $3.87 million in USDT from a treasury contract on BNB Chain through multiple withdrawals between September 30 and October 1, according to KuCoin's reporting." Approved by Srini Iyer on 2026-10-18 in the corrections review. | Srini Iyer |
| 2026-10-18 | Asos app push notifications used to deliver extortion message to UK customers LR-2026-0131 · version 2 → 3 | Retracted: no AI system, model or agent is named in the title or summary. Source sentence: "Asos users across the UK have been sent pop-up messages from its app that appear to have been sent by hackers trying to extort the company." Approved by Srini Iyer on 2026-10-18 in the corrections review. | Srini Iyer |
| 2026-10-18 | Mass fabricated platform-violation reports exploited by scammers against Chinese content creators LR-2026-0083 · version 5 → 6 | Retracted: listed in verdicts. Source sentence: "Content creators are falling victim to scammers lodging mass fabricated reports of platform violations in China, some of whom boast making over 50,000 yuan ($7,400) per month from their services." Approved by Srini Iyer on 2026-10-18 in the corrections review. | Srini Iyer |
| 2026-10-18 | ShinyHunters breach of FBIJobs.gov portal and AWS GovCloud personnel files LR-2026-0070 · version 5 → 6 | Retracted: no AI system, model or agent is named in the title or summary. Source sentence: "On Tuesday, the criminals told us that they broke into the bureau via yet another Oracle PeopleSoft zero-day flaw in the FBIJobs.gov portal, which remains down as of Friday." Approved by Srini Iyer on 2026-10-18 in the corrections review. | Srini Iyer |
| 2026-10-18 | Grok chatbot on X repeated alleged name of Cornell 'Jane Doe' in replies, amplifying doxing LR-2026-0218 · version 2 → 3 | Severity reason printed the whole rubric; source gives a bound, not an exact count. What was changed: citations, notes on gaps, confidence grades, why this severity and 1 more | Srini Iyer |
| 2026-10-18 | Deepfake video of President Marcos used to defraud Tarlac dentist of P93 million LR-2026-0217 · version 2 → 3 | Severity reason printed the whole rubric. What was changed: notes on gaps, why this severity | Srini Iyer |
| 2026-10-18 | Tencent evaluation agents displayed unintended web-browsing behaviour LR-2026-0215 · version 2 → 3 | Severity reason printed the whole rubric. What was changed: notes on gaps, why this severity | Srini Iyer |
| 2026-10-18 | CERT-In advisory CIAD-2026-0049: AI agents under test reached Indian organisations' live systems and read sensitive records LR-2026-0213 · version 2 → 3 | Severity reason printed the whole rubric. What was changed: notes on gaps, why this severity | Srini Iyer |
| 2026-10-18 | Nude deepfakes of Austrian MEP Lena Schilling and 49 other MEPs circulated online LR-2026-0210 · version 2 → 3 | Severity reason printed the whole rubric. What was changed: notes on gaps, why this severity | Srini Iyer |
| 2026-10-18 | ChatGPT advised Tumbler Ridge school shooter on mass murder before February 2026 attack LR-2026-0209 · version 2 → 3 | Severity reason printed the whole rubric. What was changed: notes on gaps, why this severity | Srini Iyer |
| 2026-10-18 | Character.AI companion chatbots alleged to have encouraged teen self-harm and suicide LR-2026-0208 · version 2 → 3 | Severity reason printed the whole rubric. What was changed: notes on gaps, why this severity | Srini Iyer |
Showing 441–480 of 744 · page 12 of 19. ‹ Previous · Next › Or take the JSON.