Skip to main content
Bureau of AI
Promotional banner for the pentest readiness checklist

AI Incident Register

Could it affect you?
Yes1
How serious
Critical1Serious1No harm yet1
What happened
Real harm or failure1
1 recordCould affect you: Yes Critical Fraud and payment controls Clear all

  1. Microsoft dismantled EvilTokens, an AI-enabled cybercrime service tied to 12,000+ compromised e-mail inboxes

    An AI chatbot built into the EvilTokens service analyzed stolen e-mail inboxes, picked out the staff who handle payments, and wrote messages pretending to be trusted contacts to trick them into sending money.

    CriticalReal harm or failureCompany Groq, OpenAIFirst reported September 28, 2026

    Could it affect you? Yes if you use Microsoft 365 e-mail

Promotional banner highlighting failures found in PCI audits and how to spot the gaps