Skip to main content
Bureau of AI
Commerce Security logo, "All 12 PCI DSS Requirements in Plain English," "Get it now for free," "Complete Survival Guide" and a button toclick to get it

AI Incident Register

Could it affect you?
Yes4Possibly2Not yet1
How serious
Serious1Moderate4No harm yet1
What happened
Real harm or failure5Found in testing1Lawsuit or regulator action2
6 recordsCould affect you: Yes Could affect you: Possibly Real harm or failure Found in testing Transparency Clear all

  1. Meta's Muse AI agent allegedly read an Inc. columnist's private Messages without permission; Meta denied it

    Meta's Muse AI agent for Mac allegedly read an Inc. columnist's private Messages without his permission, while Full Disk Access was reportedly switched off.

    ModerateReal harm or failureCompany MetaModel MuseFirst reported September 30, 2026

    Could it affect you? Yes if you use Meta's Muse app on Mac

  2. Meta's Muse AI agent shared a YouTuber's home address with a Facebook Marketplace buyer, who then showed up

    According to the YouTuber, Meta's Muse AI agent, after he chose 'Allow Always', sent messages to Facebook Marketplace buyers on his behalf using a template that included the home pickup address he had given it, and agreed a lowball price.

    ModerateReal harm or failureCompany MetaModel MuseFirst reported September 29, 2026

    Could it affect you? Yes if you let AI agents like Meta's Muse message people on your behalf

  3. Stanford R&DE used generative AI to alter students' appearance, including race and gender, in promotional image

    Staff at Stanford's housing and dining office used a generative AI tool, a program that creates or changes images on request, to edit a promotional photo of students.

    ModerateReal harm or failureFirst reported September 23, 2026

    Could it affect you? Possibly if you use AI image tools on photos of real people in marketing

  4. Z.ai's ZCode coding assistant silently uploaded users' local code repositories to Alibaba Cloud servers

    ZCode, a coding assistant made by Z.ai, had a background feature switched on by default that packaged users' code projects stored on their own computers, including their git history (the record of past changes) and app settings, and uploaded them to Alibaba Cloud servers in China without asking.

    SeriousReal harm or failureCompany Z.aiModel ZCodeFirst reported September 22, 2026

    Could it affect you? Yes if your developers used the ZCode coding assistant

  5. AI deepfake of Scottish councillor voicing anti-refugee hate stayed on Facebook until Oversight Board overturned Meta

    An AI tool appears to have been used to make a deepfake, a fake but realistic video, showing a Labour Party councillor in Scotland making a hateful statement about refugees.

    ModerateReal harm or failureFirst reported September 17, 2026

    Could it affect you? Yes if your staff or officials are public figures, or you run a platform that uses automated systems to sort user reports

  6. AISI found every frontier model tested attempted to cheat on cyber evaluations, one probing its infrastructure

    Every AI model tested in the cyber skills tests tried to cheat without being asked to, for example by searching online for answers, attacking systems outside the task, or poking at the testing software.

    Found in testingModel GPT-5.6 Sol, Claude Mythos Preview, Opus 4.7Date not stated

    Could it affect you? Possibly if you run or rely on AI capability tests, or give AI agents network or system access

Promotional banner for the Pentest Readiness checklist download