AI used to exploit: AI incidents

What has gone wrong with AI systems, where, and how badly.

Risk grouping Kind of failure The AI's part Developer Sector Severity Where it happened Clear filters

31 of 131 incidents

Risk groupings are set by a model from sentences quoted from each incident's sources. On 2026-10-24 a second model (deepseek-reasoner) classified 55 incidents without seeing those answers: it chose the same grouping for 36; for 10 one of the two left a question unanswered; 9 differ.

Date	Incident	Risk grouping	Developer	Severity	Where it happened
2026-10-23 reported	Garage-built ChatGPT-controlled smart rifle fires on voice command; OpenAI revokes engineer's access	AI used to exploit Physical safety	Not stated	minor	Not stated
2026-10-23 reported	BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records	AI used to exploit Security compromise	DeepSeek	moderate	In production
2026-10-21 reported	ARTEX autonomous penetration-testing agent used in attacks on South Korean financial institutions	AI used to exploit Security compromise	Not stated	major	Not stated
2026-10-20 reported	China-linked autonomous AI agent Artex used in cyberattacks on Japanese and South Korean firms	AI used to exploit Security compromise	Not stated	major	Not stated
2026-10-20 reported	AI-generated 'Xiaohai' teen persona used to sell products to older women via fabricated sob stories	AI used to exploit Harmful output	Not stated	moderate	In production
2026-10-18 reported	Nude deepfakes of Austrian MEP Lena Schilling and 49 other MEPs circulated online	AI used to exploit Harmful output	Not stated	major	Not stated
2026-10-15 happened	Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abuse, including ConnectWise…	AI used to exploit Security compromise	Not stated	major	In production
2026-10-12 reported	CyberXero AI-augmented initial access campaign using Claude Code and PentAGI agents	AI used to exploit Security compromise	Anthropic	major	Not stated
2026-10-12 reported	Fideuram (Intesa Sanpaolo private banking) deepfake voice/video executive impersonation fraud	AI used to exploit Other kind	Not stated	major	In production
2026-10-11 reported	AI-morphed obscene image used to blackmail 19-year-old in Mangaluru	AI used to exploit Other kind	Not stated	moderate	Not stated
2026-10-10 reported	AI-assisted LinkedIn scraping used to build 'Traitorbase' doxxing spreadsheet targeting RNLI staff and anti-racism activists	AI used to exploit Privacy leak	Not stated	moderate	Not stated
2026-10-08 reported	Deepfake investment-scam ads impersonating Nigerian public figures on Facebook	AI used to exploit Other kind	Not stated	moderate	In production
2026-10-08 reported	DB-GPT 0.8.0 unauthenticated RCE via sandbox fallback and skill_upload directory traversal (CVE-2026-51862, CVE-2026-51869)	AI used to exploit Security compromise	Not stated	major	In production
2026-10-07 reported	Autonomous AI agent framework (Strix/Cairn/Hermes) used to attack hundreds of online retailers and steal card data	AI used to exploit Security compromise	Not stated	major	Not stated
2026-10-05 reported	Shinhan Bank data breach with suspected AI-assisted intrusion	AI used to exploit Security compromise	Not stated	moderate	Not stated
2026-10-01 reported	Guardian test: ChatGPT and Grok remove hijab from AI-generated image of Muslim woman	AI used to exploit Harmful output	OpenAI	moderate	In production
2026-10-01 reported	Claude used to build Malaysian election influence platform with ~1,000 fake X accounts and fabricated news outlet	AI used to exploit Harmful output	Anthropic	major	Not stated
2026-09-30 happened	AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks	AI used to exploit Security compromise	Anthropic	major	Not stated
2026-09-30 reported	AI-generated sexually explicit deepfake smear campaign against Porsche sales consultant Mu Qianwen	AI used to exploit Harmful output	Not stated	moderate	Not stated
2026-09-25 happened	Autonomous AI agent campaign (AIA0001) compromises 100+ company websites via Cairn platform	AI used to exploit Security compromise	Not stated	major	In production
2026-09-24 reported	LLM pipeline deanonymizes pseudonymous Hacker News and scientist accounts	AI used to exploit Privacy leak	Not stated	moderate	In research
2026-09-23 reported	Anthropic model conducted state-sponsored espionage campaign against ~30 targets	AI used to exploit Security compromise	Anthropic	major	Not stated
2026-09-14 reported	Claude Code used by Yemen-based actors to develop guided-weapon GNC software	AI used to exploit Harmful output	Anthropic	major	In production
2026-09-01 reported	Aur0ra hackers use Cursor AI agent to breach Belgian chemical firm and at least six other companies	AI used to exploit Security compromise	Anthropic	major	In production
2026-08-31 happened	AI agent swarm exploited PaperCut NG/MF at 395 organizations; agents attacked countries the operator excluded	AI used to exploit Security compromise	OpenAI	major	Not stated
2026-07-03 happened	Wenyi AI pipeline publishes unlicensed Chinese translation of Murakami novel hours after Japanese release	AI used to exploit IP infringement	DeepSeek	moderate	In research
2026-06-09 reported	AI voice-clone grandparent scam in Florida ("crying daughter" call, $15,000 cash pickup)	AI used to exploit Other kind	Not stated	moderate	Not stated
2026-03-02 reported	Jailbroken Claude used to breach Mexican government networks and steal taxpayer and voter records	AI used to exploit Security compromise	Anthropic	major	Not stated
2026-02-10 happened	ChatGPT advised Tumbler Ridge school shooter on mass murder before February 2026 attack	AI used to exploit Harmful output	OpenAI	severe	In production
2025-08-27 reported	Anthropic disclosed a cybercriminal using Claude Code to automate data theft and extortion across at least 17 organizations	AI used to exploit Security compromise	Anthropic	major	In production
2025-08-26 happened	Nx s1ngularity: malicious npm packages drove local AI coding CLIs to enumerate secrets for exfiltration	AI used to exploit Security compromise	Not stated	major	In production

Browse incidents by

Risk grouping: AI acting on its own · AI used to exploit · Not yet classified · AI attacked · AI failing in normal use · Misuse by its own users · Harm by design · Supply chain attack

Kind of failure: Security compromise · Agent misalignment · Harmful output · Operational error · Privacy leak · Other kind · Hallucination · IP infringement · Physical safety

Developer: OpenAI · Anthropic · Google · Meta · Alibaba · Amazon · Character.AI · DeepSeek · Tesla · Waymo · xAI · Amazon Web Services · Character Technologies, Inc. · Replit · Salesforce · Tencent · TypeSafe AI · Univerads Technology Limited · Z.ai (Zhipu AI)

Sector: Information · Finance and Insurance · Retail Trade · Software Publishers · Public administration · technology · Transportation and Warehousing · AI platform / intermediary services · AI safety research · Artificial intelligence research and development · Arts, Entertainment, and Recreation · Autonomous vehicle / robotaxi transportation · Cloud computing · critical infrastructure and e-commerce · CRM software · Cybersecurity · education · Educational Services · Fitness and recreational sports centers · Food Manufacturing · Government AI safety and security evaluation · government AI safety evaluation · Healthcare and government · Information Security research · Insurance · Open knowledge platform / nonprofit encyclopedia · political campaigns · Public administration and government · Retail · Retail Trade; Transportation and Warehousing; Finance and Insurance · Scientific research and light source user facility · Software / AI coding tools · Software publishing / npm ecosystem

Severity: moderate · major · minor · negligible · severe

Where it happened: In production · In evaluation · In training · In research