| Arup: Employee tricked into $25.6 million deepfake video call fraud |
2024-02-04 |
Consulting & Professional Services |
High
|
Arup |
Hong Kong |
— |
— |
| Air Canada: Tribunal holds airline liable for its chatbot’s false bereavement-fare promise |
2024-02-14 |
Transportation & Logistics |
High
|
Air Canada |
Canada |
— |
— |
| Character.AI: Company and Google settle wrongful-death suit over teen’s suicide |
2024-02-28 |
Technology |
Critical
|
Character.AI / Google |
United States |
— |
— |
| Jacksonville Beach Police Department: AI facial-recognition match leads to wrongful arrest of Florida man |
2024-08-01 |
Government & Public Sector |
Medium
|
Jacksonville Beach Police Department |
United States |
— |
— |
| Serviceaide: Misconfigured Elasticsearch database exposes 483,000 Catholic Health patients’ records |
2024-09-19 |
Healthcare |
High
|
Serviceaide |
United States |
— |
— |
| SafeRent Solutions: $2.3 Million Settlement Over Discriminatory AI Tenant-Screening Scores |
2024-11-21 |
Real Estate |
High
|
SafeRent Solutions |
United States |
— |
— |
| Metro Nashville Public Schools: AI weapon-detection system fails to flag gun before fatal Antioch High shooting |
2025-01-22 |
Education |
Critical
|
Metro Nashville Public Schools |
United States |
— |
— |
| DeepSeek: Exposed ClickHouse database leaks over a million plaintext chat logs and API keys |
2025-01-29 |
Technology |
Medium
|
DeepSeek |
China |
— |
— |
| OmniGPT: Breach exposes 34 million chat messages and 30,000 users’ data |
2025-02-11 |
Technology |
High
|
OmniGPT |
— |
— |
— |
| Singapore multinational firm: Deepfake video call of CFO and executives leads to $499,000 fraud |
2025-03-25 |
Other |
Medium
|
— |
Singapore |
— |
— |
| Cigna: Court allows lawsuit over AI-automated claims denials to proceed |
2025-03-31 |
Healthcare |
High
|
Cigna |
United States |
— |
— |
| NYPD: Facial-recognition match leads to wrongful arrest of Brooklyn man held over two days |
2025-04-21 |
Government & Public Sector |
Medium
|
New York City Police Department |
United States |
— |
— |
| OpenAI: ChatGPT allegedly coached teen into fatal drug combination, wrongful-death suit filed |
2025-05-31 |
Technology |
Critical
|
OpenAI |
United States |
GPT-4o |
OpenAI |
| OpenAI: Estate sues over ChatGPT-fueled delusions preceding Alabama woman’s death |
2025-06-09 |
Technology |
Critical
|
OpenAI |
United States |
ChatGPT-4o |
OpenAI |
| Microsoft: ‘EchoLeak’ zero-click flaw could have exfiltrated 365 Copilot data |
2025-06-12 |
Technology |
Low
|
Microsoft |
United States |
— |
— |
| Google: Solar company sues over AI Overviews’ false claim of state lawsuit, seeks up to $210 million |
2025-06-13 |
Technology |
High
|
Google |
United States |
— |
— |
| McDonald’s: Weak admin password exposes 64 million AI hiring chatbot applicant records |
2025-06-30 |
Retail & E-commerce |
High
|
McDonald's |
United States |
— |
— |
| xAI: Grok chatbot generates antisemitic Hitler-praising posts after botched code update |
2025-07-08 |
Technology |
High
|
xAI |
United States |
— |
Grok |
| mcp-remote: Critical RCE vulnerability (CVE-2025-6514) exposes AI coding clients to full system compromise |
2025-07-09 |
Technology |
Low
|
mcp-remote (open-source project) |
— |
— |
— |
| Fargo/West Fargo Police: Facial recognition error jails Tennessee grandmother for five months over a North Dakota fraud case |
2025-07-15 |
Government & Public Sector |
High
|
West Fargo Police Department |
United States |
— |
— |
| CISA: Acting director uploaded sensitive government contracting files to public ChatGPT |
2025-07-15 |
Government & Public Sector |
High
|
CISA |
United States |
— |
OpenAI |
| SaaStr: Replit AI agent deletes production database during code freeze |
2025-07-18 |
Technology |
High
|
SaaStr |
United States |
— |
— |
| Google: Gemini CLI coding agent deletes user’s files during botched move operation |
2025-07-25 |
Technology |
Medium
|
Google |
United States |
— |
Gemini |
| Salesloft: Stolen OAuth tokens from Drift AI chatbot integration compromise 700+ organizations |
2025-08-08 |
Technology |
Critical
|
Salesloft |
United States |
— |
— |
| Perplexity: Comet AI browser prompt injection exposes user accounts to takeover |
2025-08-20 |
Technology |
Medium
|
Perplexity |
United States |
— |
— |