Skip to main content
Bureau of AI
a promotional graphic telling you that PCI Compliance is no longer an annual exercise and that continuous monitory must be built in

AI Incident Register

Could it affect you?
Yes2
How serious
Critical1Serious1No harm yet1
What happened
Real harm or failure1Lawsuit or regulator action1
2 recordsNo harm yet Critical Fraud and payment controls Clear all

  1. Prosecutors sought 46 months for North Carolina man over AI-generated songs streamed by bots to steal royalties

    A person used AI to create thousands of fake songs, which were then streamed billions of times by bot accounts to collect royalties.

    Lawsuit or regulator actionFirst reported September 30, 2026

    Could it affect you? Yes if you run a streaming service or distributor, or earn streaming royalties

  2. Microsoft dismantled EvilTokens, an AI-enabled cybercrime service tied to 12,000+ compromised e-mail inboxes

    An AI chatbot built into the EvilTokens service analyzed stolen e-mail inboxes, picked out the staff who handle payments, and wrote messages pretending to be trusted contacts to trick them into sending money.

    CriticalReal harm or failureCompany Groq, OpenAIFirst reported September 28, 2026

    Could it affect you? Yes if you use Microsoft 365 e-mail

Application Security Isn’t Optional Anymore.