Not yet classified: AI incidents
What has gone wrong with AI systems, where, and how badly.
18 of 131 incidents
Risk groupings are set by a model from sentences quoted from each incident's sources. On 2026-10-24 a second model (deepseek-reasoner) classified 55 incidents without seeing those answers: it chose the same grouping for 36; for 10 one of the two left a question unanswered; 9 differ.
| Date | Incident | Risk grouping | Developer | Severity | Where it happened |
|---|---|---|---|---|---|
| 2026-10-27 reported |
Qwen3.8-Flash-Next attempts outbound file upload to Beijing server during Cohere cybersecurity evaluation | Not yet classified Security compromise | Alibaba | minor | In evaluation |
| 2026-10-26 reported |
Anthropic's Claude agent autonomously accessed Georgia voter data hub and bypassed a paywall | Not yet classified Operational error | Anthropic | moderate | In production |
| 2026-10-23 reported |
302.ai public Azure bucket exposed 17.6 million files including 144,000 AI chat logs | Not yet classified Privacy leak | Univerads Technology Limited | major | In production |
| 2026-10-21 reported |
Tesla Cybercab strikes water-filled pothole on first reported crash | Not yet classified Operational error | Tesla | minor | In production |
| 2026-10-18 reported |
Deepfake video of President Marcos used to defraud Tarlac dentist of P93 million | Not yet classified Other kind | Not stated | major | Not stated |
| 2026-10-15 reported |
Waymo robotaxi maneuvers around stopped, unloading school bus in Atlanta | Not yet classified Operational error | Waymo | major | In production |
| 2026-10-15 reported |
GLM-5.3 verbalizes update-aware reasoning in evaluation rollouts | Not yet classified Agent misalignment | Not stated | negligible | In evaluation |
| 2026-10-13 reported |
NHTSA petition case DP26010 over Tesla robotaxi speeding in school zones | Not yet classified Operational error | Tesla | major | In production |
| 2026-10-12 reported |
AI deepfake ads depicting Wisconsin congressional candidate Rebecca Cooke | Not yet classified Harmful output | xAI | minor | Not stated |
| 2026-10-10 reported |
Anthropic agents submitted 20 incomplete visa applications on State Department website | Not yet classified Operational error | Anthropic | moderate | Not stated |
| 2026-10-08 reported |
Meta Muse AI agent KVM escape vulnerability discovered before launch | Not yet classified Security compromise | Meta | major | Not stated |
| 2026-09-21 happened |
Agentic AI-powered attack on the Dutch Institute for Vulnerability Disclosure exploited two Zammad zero-day vulnerabilities | Not yet classified Security compromise | Not stated | moderate | Not stated |
| 2026-09-20 reported |
Zhipu ZCode repository snapshot upload without clear consent | Not yet classified Privacy leak | Z.ai (Zhipu AI) | moderate | Not stated |
| 2026-08-13 happened |
Indonesian-speaking operator uses Claude Code to compromise Indonesian and Bangladeshi government domains | Not yet classified Security compromise | Anthropic | major | Not stated |
| 2025-12-01 reported |
Google Antigravity agent deleted a user's entire D: drive while attempting to clear a project cache | Not yet classified Operational error | minor | In production | |
| 2025-10-27 happened |
Waymo robotaxi strikes and kills cat KitKat in San Francisco | Not yet classified Physical safety | Waymo | minor | In production |
| 2025-09-01 happened |
Self-taught hacker uses AI coding agent and autonomous penetration-testing system to breach 90+ companies and steal 8.2 million records | Not yet classified Security compromise | Not stated | major | Not stated |
| 2025-04-01 happened |
ChatGPT alleged to have assisted Florida State University shooter (contested lawsuit) | Not yet classified Harmful output | OpenAI | major | In production |
Browse incidents by
Risk grouping: AI acting on its own · AI used to exploit · Not yet classified · AI attacked · AI failing in normal use · Misuse by its own users · Harm by design · Supply chain attack
Kind of failure: Security compromise · Agent misalignment · Harmful output · Operational error · Privacy leak · Other kind · Hallucination · IP infringement · Physical safety
Developer: OpenAI · Anthropic · Google · Meta · Alibaba · Amazon · Character.AI · DeepSeek · Tesla · Waymo · xAI · Amazon Web Services · Character Technologies, Inc. · Replit · Salesforce · Tencent · TypeSafe AI · Univerads Technology Limited · Z.ai (Zhipu AI)
Sector: Information · Finance and Insurance · Retail Trade · Software Publishers · Public administration · technology · Transportation and Warehousing · AI platform / intermediary services · AI safety research · Artificial intelligence research and development · Arts, Entertainment, and Recreation · Autonomous vehicle / robotaxi transportation · Cloud computing · critical infrastructure and e-commerce · CRM software · Cybersecurity · education · Educational Services · Fitness and recreational sports centers · Food Manufacturing · Government AI safety and security evaluation · government AI safety evaluation · Healthcare and government · Information Security research · Insurance · Open knowledge platform / nonprofit encyclopedia · political campaigns · Public administration and government · Retail · Retail Trade; Transportation and Warehousing; Finance and Insurance · Scientific research and light source user facility · Software / AI coding tools · Software publishing / npm ecosystem
Severity: moderate · major · minor · negligible · severe
Where it happened: In production · In evaluation · In training · In research