Skip to main content
Bureau of AI
Promotional banner ad for the Penetration Testing Report Kit

AI Incident Register

Could it affect you?
Yes2
How serious
Critical1Serious1Moderate1No harm yet0
What happened
Real harm or failure2Lawsuit or regulator action1Near miss1
2 recordsNo harm yet Moderate Critical Real harm or failure Deepfakes and impersonation Clear all

  1. Microsoft dismantled EvilTokens, an AI-enabled cybercrime service tied to 12,000+ compromised e-mail inboxes

    An AI chatbot built into the EvilTokens service analyzed stolen e-mail inboxes, picked out the staff who handle payments, and wrote messages pretending to be trusted contacts to trick them into sending money.

    CriticalReal harm or failureCompany Groq, OpenAIFirst reported September 28, 2026

    Could it affect you? Yes if you use Microsoft 365 e-mail

  2. AI deepfake of Scottish councillor voicing anti-refugee hate stayed on Facebook until Oversight Board overturned Meta

    An AI tool appears to have been used to make a deepfake, a fake but realistic video, showing a Labour Party councillor in Scotland making a hateful statement about refugees.

    ModerateReal harm or failureFirst reported September 17, 2026

    Could it affect you? Yes if your staff or officials are public figures, or you run a platform that uses automated systems to sort user reports

Promotional banner for the Pentest Readiness checklist download