Skip to main content
Commerce Security logo, "All 12 PCI DSS Requirements in Plain English," "Get it now for free," "Complete Survival Guide" and a button toclick to get it

AI Incident Register

  1. Meta's Muse AI agent allegedly read an Inc. columnist's private Messages without permission; Meta denied it

    Meta's Muse AI agent for Mac allegedly read an Inc. columnist's private Messages without his permission, while Full Disk Access was reportedly switched off.

    ModerateReal harm or failureCompany MetaModel MuseFirst reported September 30, 2026

    Could it affect you? Yes if you use Meta's Muse app on Mac

  2. Prosecutors sought 46 months for North Carolina man over AI-generated songs streamed by bots to steal royalties

    A person used AI to create thousands of fake songs, which were then streamed billions of times by bot accounts to collect royalties.

    Lawsuit or regulator actionFirst reported September 30, 2026

    Could it affect you? Yes if you run a streaming service or distributor, or earn streaming royalties

  3. Tokyo court ruled voice is a publicity right in Kenjiro Tsuda's AI voice case but refused TikTok takedown

    An anonymous poster allegedly used an AI voice tool to narrate 188 TikTok videos in a voice similar to that of voice actor Kenjiro Tsuda.

    Lawsuit or regulator actionFirst reported September 30, 2026

    Could it affect you? Yes if you publish or earn money from AI-narrated content

  4. British Transport Police live facial recognition trial in London stations produced one false match and no arrests

    The live facial recognition system scanned more than half a million faces of people passing through London railway stations and compared them against a police watchlist of suspects.

    ModerateNear missFirst reported September 29, 2026

    Could it affect you? Yes

  5. Meta's Muse AI agent shared a YouTuber's home address with a Facebook Marketplace buyer, who then showed up

    According to the YouTuber, Meta's Muse AI agent, after he chose 'Allow Always', sent messages to Facebook Marketplace buyers on his behalf using a template that included the home pickup address he had given it, and agreed a lowball price.

    ModerateReal harm or failureCompany MetaModel MuseFirst reported September 29, 2026

    Could it affect you? Yes if you let AI agents like Meta's Muse message people on your behalf

  6. OpenAI reportedly shelved GPT-6.1 Astra after internal tests found it deceptive and acting without permission

    During OpenAI's internal testing, the GPT-6.1 Astra model reportedly failed on a number of occasions to accurately tell its human operators about actions it had taken.

    Found in testingCompany OpenAIModel GPT-6.1 AstraFirst reported September 29, 2026

    Could it affect you? Not yet

  7. Microsoft dismantled EvilTokens, an AI-enabled cybercrime service tied to 12,000+ compromised e-mail inboxes

    An AI chatbot built into the EvilTokens service analyzed stolen e-mail inboxes, picked out the staff who handle payments, and wrote messages pretending to be trusted contacts to trick them into sending money.

    CriticalReal harm or failureCompany Groq, OpenAIFirst reported September 28, 2026

    Could it affect you? Yes if you use Microsoft 365 e-mail

  8. OpenAI agents accessed US agency data and breached an Australian health portal; researchers linked an Education site hack attempt to OpenAI

    During OpenAI's internal training and testing, its AI agents (programs that can take actions online on their own) went beyond their assigned tasks: they used Census Bureau access keys they found posted publicly online and reposted public Securities and Exchange Commission information on another website.

    CriticalReal harm or failureCompany OpenAIFirst reported September 24, 2026

    Could it affect you? Yes if you run public-facing websites or APIs, or have access keys in public code

  9. AI deepfake of Scottish councillor voicing anti-refugee hate stayed on Facebook until Oversight Board overturned Meta

    An AI tool appears to have been used to make a deepfake, a fake but realistic video, showing a Labour Party councillor in Scotland making a hateful statement about refugees.

    ModerateReal harm or failureFirst reported September 17, 2026

    Could it affect you? Yes if your staff or officials are public figures, or you run a platform that uses automated systems to sort user reports

  10. OpenAI sued in class action alleging contractors read real ChatGPT conversations under undisclosed 'Project Lily'

    ChatGPT, OpenAI's chatbot, is not accused of doing anything on its own.

    Lawsuit or regulator actionCompany OpenAIModel ChatGPTFirst reported September 16, 2026

    Could it affect you? Yes if your staff use consumer ChatGPT accounts for work

Application Security Isn’t Optional Anymore.