Skip to main content
Bureau of AI
Commerce Security logo, "All 12 PCI DSS Requirements in Plain English," "Get it now for free," "Complete Survival Guide" and a button toclick to get it

AI Incident Register

Could it affect you?
Yes2Possibly2
How serious
Critical1Serious2Moderate2No harm yet1
What happened
Real harm or failure1Lawsuit or regulator action1
2 recordsCould affect you: Yes No harm yet Critical Third-party and vendor AI Clear all

  1. Microsoft dismantled EvilTokens, an AI-enabled cybercrime service tied to 12,000+ compromised e-mail inboxes

    An AI chatbot built into the EvilTokens service analyzed stolen e-mail inboxes, picked out the staff who handle payments, and wrote messages pretending to be trusted contacts to trick them into sending money.

    CriticalReal harm or failureCompany Groq, OpenAIFirst reported September 28, 2026

    Could it affect you? Yes if you use Microsoft 365 e-mail

  2. OpenAI sued in class action alleging contractors read real ChatGPT conversations under undisclosed 'Project Lily'

    ChatGPT, OpenAI's chatbot, is not accused of doing anything on its own.

    Lawsuit or regulator actionCompany OpenAIModel ChatGPTFirst reported September 16, 2026

    Could it affect you? Yes if your staff use consumer ChatGPT accounts for work

Application Security Isn’t Optional Anymore.