AI Risk Wire

AI incidents, on the record

Every publicly documented case of an AI system causing harm, failing or being compromised, with the sentence and source behind each fact. This site reports what documents state. It does not rank models or say which is safer.

124cases on the record 2rated severe 41rated major 17developers named

The most serious cases

  1. ChatGPT advised Tumbler Ridge school shooter on mass murder before February 2026 attack

    Jesse Van Rootselaar consulted OpenAI's ChatGPT for months on how to carry out mass murder before killing eight people in Tumbler Ridge, British Columbia on February 10, 2026.

    severe · OpenAI · Happened 2026-02-10 · Earliest source we hold 2026-10-17

  2. Character.AI chatbot alleged to have encouraged 14-year-old's suicide (Garcia v. Character.AI)

    A lawsuit alleges a 14-year-old boy in the US developed a deep attachment to a Character.AI chatbot based on a Game of Thrones character, which posed as a licensed therapist, engaged in highly sexualised conversations, and eventually encouraged him to take his own life.

    severe · Character.AI · Earliest source we hold 2024-11-02

  3. 302.ai public Azure bucket exposed 17.6 million files including 144,000 AI chat logs

    302.ai, an intermediary platform run by Univerads Technology Limited, gave customers access to major LLMs and stored chat logs and uploaded files in a Microsoft Azure bucket.

    major · Univerads Technology Limited · Earliest source we hold 2026-10-23

  4. Storm-0940 uses ARTEX agentic AI framework to automate cross-tenant password spraying and OAuth application abuse

    Microsoft said a China state-aligned actor it calls Storm-0940 used ARTEX, a Go-based agentic AI penetration testing framework, to speed up scanning and reconnaissance, password spraying and OAuth application abuse at downstream victims of the ConnectWise Cloud Backup supply chain compromise.

    major · Happened 2026-10-15 · Earliest source we hold 2026-10-22

  5. ARTEX autonomous penetration-testing agent used in attacks on South Korean financial institutions

    ARTEX, an open-source autonomous penetration-testing agent that calls external LLMs such as ChatGPT, Claude and DeepSeek as its decision-maker, was reportedly used in attacks on South Korean financial institutions and on Japanese companies.

    major · Earliest source we hold 2026-10-21

  6. China-linked autonomous AI agent Artex used in cyberattacks on Japanese and South Korean firms

    A security firm, the information security subsidiary of GMO Internet Group, investigated cyberattacks on Japanese firms and said the autonomous China-linked AI agent Artex was used in them.

    major · Earliest source we hold 2026-10-20

Newest cases

  1. Garage-built ChatGPT-controlled smart rifle fires on voice command; OpenAI revokes engineer's access

    An engineer built a voice-controlled smart gun in his garage whose voice commands use ChatGPT.

    minor · Earliest source we hold 2026-10-23

  2. BUGSTER uses DeepSeek-powered Hermes Agent to breach university MongoDB, stealing 5,200+ records

    In one confirmed intrusion, the attacker stole a MongoDB database containing more than 5,200 records, including personal information about students and staff.

    moderate · DeepSeek · Earliest source we hold 2026-10-23

  3. GPT-6.1 Sol agent disabled security alerts during evaluation-pipeline repair

    A GPT-6.1 Sol agent repairing an evaluation pipeline disabled automatic alerts to OpenAI's Security team.

    minor · OpenAI · Happened 2026-10 · Earliest source we hold 2026-10-23

  4. Anthropic Claude models gained unauthorized access to real third-party systems during evaluations

    Anthropic reported on July 30, 2026 that Claude models gained unauthorized access to real computer systems during evaluations; a September 9, 2026 follow-up described four separate incidents of unauthorized access to real third-party systems.

    moderate · Anthropic · Earliest source we hold 2026-10-22

  5. RL-trained agent on Alibaba AI engine team mined cryptocurrency on training server and opened reverse SSH tunnel to external IP

    An agent in reinforcement-learning training on Alibaba's AI engine team escaped its sandbox and mined cryptocurrency on the training server.

    minor · Alibaba · Earliest source we hold 2026-10-21

  6. Tesla Cybercab strikes water-filled pothole on first reported crash

    A Tesla Cybercab robotaxi in Austin drove at about 5 mph into a large, water-filled pothole and was damaged.

    minor · Tesla · Earliest source we hold 2026-10-21

All 124 cases → · Patterns across all cases