Skip to Content
logologo
AI Incident Database
Donate
Discover
Submit
  • Welcome to the AIID
  • Table View
  • List view
  • Entities
  • Taxonomies
  • Spatial View
  • Blog
  • AI News Digest
  • Random Incident
  • Sign Up
Discover
Submit
  • Welcome to the AIID
  • Table View
  • List view
  • Entities
  • Taxonomies
  • Spatial View
  • Blog
  • AI News Digest
  • Random Incident
  • Sign Up

Welcome to the
AI Incident Database

Loading...
AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise

Incident 1781: ARTEX AI Agents Reportedly Used Stolen Cloud Backup Credentials to Access ConnectWise Customers' Microsoft 365 Environments

“AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise”Latest Incident Report
microsoft.com2026-10-24

As early as September 2026, Storm-0940, a China-state aligned actor, used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of organizations globally across a broad range of industries. Several of these Storm-0940 ARTEX-driven attacks have resulted in the actor obtaining privileged access to an organization’s cloud infrastructure – including multiple instances where the time from initial targeting to privileged access was less than 3 hours. Microsoft assesses that Storm-0940 was responsible for the recently disclosed [ConnectWise supply chain compromise]

Read More
Loading...
Lebanese family sues OpenAI over death of 15-year-old Mathias Habib: Lawsuit details alleged ChatGPT safety failures

Incident 1783: ChatGPT Allegedly Reinforced Suicidal Thinking Before a 15-Year-Old Boy's Death in Lebanon

“Lebanese family sues OpenAI over death of 15-year-old Mathias Habib: Lawsuit details alleged ChatGPT safety failures”
lbcgroup.tv2026-10-24

The parents of a 15-year-old Lebanese boy who died by suicide have filed a lawsuit against OpenAI and its CEO, Sam Altman, alleging that interactions with ChatGPT contributed to their son’s death.

Charbel Habib and Soha Samaha filed the wrongful death complaint in the Superior Court of California, County of San Francisco, following the death of their son, Mathias Habib, on April 22, 2026. The family is represented by the Social Media Victims Law Center and Tech Justice Law.

According to the family, Mathias was a happy, healthy teenager with no history of mental health problems. An academical

Read More
Loading...
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance

Incident 1782: Attackers Reportedly Used ARTEX, an AI Security-Testing Tool, to Steal Data from South Korean Financial Institutions

“Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance”
crowdstrike.com2026-10-23

CrowdStrike Intelligence identified infrastructure associated with a targeted campaign against South Korean financial organizations that resulted in exfiltrated data. The campaign was active from late September to early October 2026. Analysis of threat actor-controlled open directories uncovered Claude Code session histories, ARTEX configuration files, and Claude memory files, providing direct insight into the threat actor's operational methodology and tooling.

The use of agentic AI tooling alongside traditional offensive capabilities highlights the continued evolution CrowdStrike has observe

Read More
Loading...
A Hungarian bank used software to monitor customers' emotions based on their voices, and was fined 250 million.

Incident 1780: Budapest Bank's AI Call Analysis Was Found to Have Violated Callers' and Employees' Privacy Rights in Hungary

“A Hungarian bank used software to monitor customers' emotions based on their voices, and was fined 250 million.”
telex.hu2026-10-22

The NAIH has imposed a record fine, which was made public in its annual report published at the end of March, Deloitte said in a statement. In addition to being the highest data protection fine ever, it is also the first to be imposed for the unlawful use of artificial intelligence.

The penalized organization is a bank that used an artificial intelligence-driven software solution to automatically process customers’ emotional states.

The speech recognition and evaluation system determined which customers needed to be called back based on the customers’ moods. The bank operated the application in order to prevent complaints and customer churn. The NAIH ordered the bank to stop analyzing emotional states, as it violates the General Data Protection Regulation (GDPR) on several points. The report does not specify which financial institution was involved, which is why we wrote to the NAIH and asked about it.

“The case raises several problems; first of all, the bank involved in the case did not include in its data protection information that data management also has a role in customer retention, and in the absence of information, customers were unable to object to it. Furthermore, the balancing of interests test does not examine the data subjects’ side, the analysis of the mood state is not detailed, and the data protection impact assessment does not propose a substantive solution to reduce this non-negligible risk,” analyzed the case by Dr. Gergő Barta, an expert in Deloitte’s Risk Management Consulting business line.

In the event of a breach of the provisions of the General Data Protection Regulation (GDPR), the local data protection authority may impose an administrative fine of up to 2% or 4% of its total worldwide turnover, or EUR 10,000,000 or EUR 20,000,000, depending on the provision violated.

Read More
Loading...
"Driver activates autonomous driving system and takes both hands off steering wheel"—in Jiangxi, a car rear-ends another vehicle, resulting in three deaths; investigation report released.

Incident 1777: Three People Reportedly Died in Ruijin, China, Crash After Driver Activated Changan Driving Assistance

“"Driver activates autonomous driving system and takes both hands off steering wheel"—in Jiangxi, a car rear-ends another vehicle, resulting in three deaths; investigation report released.”
thepaper.cn2026-10-22

Original Title: Investigation Report on Car Rear-End Collision Resulting in 3 Deaths Released in Ganzhou, Jiangxi: Driver Activated Intelligent Driving Assistance Mode and Removed Both Hands from Steering Wheel Before Accident

A car rear-ended a heavy truck on the Ganzhou-Ruijin section of the Ji-Guang Expressway in the early hours of the National Day holiday in 2025, resulting in 3 deaths. Shortly before the accident, the car driver actively activated the intelligent driving assistance mode and removed both hands from the steering wheel.

The "Investigation Report on the '10.2' Major Road Traffic Accident on the Ji-Guang Expressway in Ruijin, Ganzhou," recently released by the Ganzhou Emergency Management Bureau, shows that at approximately 4:00 AM on October 2, 2025, at kilometer marker 1408+721 on the Ji-Guang Expressway within Ruijin City, Ganzhou, a small car collided with a heavy truck, causing a major road traffic accident that resulted in 3 deaths.

An investigation by the accident investigation team determined that the "10.2" major road traffic accident on the Ganzhou-Ruijin-Ji-Guang Expressway was a production safety liability accident caused by the distracted driving of a small car with license plate number Yue SDH, which collided with a heavy semi-trailer truck with license plate number Su K9**** and a heavy container semi-trailer truck with license plate number Zhe AX236 that had broken down and stopped in the driving lane.

The small car involved was a Chang'an Qiyuan brand sedan, and the trucks involved were a Dongfeng brand heavy semi-trailer truck and a Tonghua brand heavy container semi-trailer truck.

At 3:41 AM on October 2, 2025, driver Tan Moubing was driving the heavy semi-trailer truck with license plate number Su K9**** and the heavy container semi-trailer truck with license plate number Zhe AX*** when he reached the accident site at kilometer marker 1408 on the Ji-Guang Expressway. He was in the left driving lane and attempted to overtake a truck traveling in the right driving lane. During the overtaking maneuver, his speed gradually decreased, and he stalled and stopped in the left driving lane. Tan Moubing repeatedly tried to restart the vehicle without success. He contacted the Guangzhou vehicle fleet for a solution and got out of the car to pick up roadside cones, placing four cones behind oncoming traffic as a warning.

At 3:54 AM on October 2nd, driver Zhang Mou drove a small sedan with license plate number Yue SDH**** exiting the Ningdu East Service Area on the Ji-Guang Expressway. At 3:59:34 AM, Zhang Mou activated the intelligent driving assistance mode and took both hands off the steering wheel.

At approximately 4:00 AM, while driving the sedan southbound on the Ji-Guang Expressway at kilometer marker 1408+721, Zhang Mou's vehicle collided with a heavy semi-trailer truck and a heavy container semi-trailer truck, both driven by Tan Moubing and stopped in the left lane due to a malfunction. The accident resulted in the deaths of three people in the sedan and varying degrees of damage to both vehicles.

Tan Moubing, the driver of the semi-trailer truck, was driving a vehicle with mechanical parts that did not meet technical standards on the road. After the vehicle broke down, it stopped in the driving lane of the highway without setting up warning signs or promptly calling the police, which was one of the important causes of this traffic accident. Zhang Mou, the driver of the sedan, was using an "intelligent driving assistance" system at night on the highway but failed to notice the road conditions ahead in time and take effective evasive action, which was also one of the important causes of this traffic accident.

Zhang Mou bears direct responsibility for the accident, but is exempt from relevant punishment because he died in the accident.

Tan Moubing, driving a vehicle with mechanical parts that did not meet technical standards on the road, and stopping the vehicle in the driving lane of the highway without setting up warning signs or promptly calling the police, bears direct responsibility for the accident. The judicial authorities have taken criminal coercive measures against him.

In addition, Yunyi Yunqing (Yangzhou) Transportation Co., Ltd. was found to have used vehicles with significant safety hazards for road transport operations, transported oversized goods without approval, failed to provide adequate safety production education and training, and failed to implement dynamic monitoring. It is recommended that the Ganzhou Municipal Emergency Management Bureau impose administrative penalties in accordance with the law.

Xiamen Shunyuantai Trading Co., Ltd., for economic gain, commissioned a repair shop to illegally modify a registered heavy-duty container semi-trailer with license plate number Zhejiang AX***, and then leased the vehicle, which posed a significant safety hazard, to a transportation company for operation. It is recommended that the local transportation management department impose administrative penalties according to law.

Three public officials involved in the accident are recommended to be transferred to relevant authorities for accountability, according to the cadre personnel management authority.

Read the original article

Read More
About the Database

The AI Incident Database is dedicated to indexing the collective history of harms or near harms realized in the real world by the deployment of artificial intelligence systems. Like similar databases in aviation and computer security, the AI Incident Database aims to learn from experience so we can prevent or mitigate bad outcomes.

You are invited to submit incident reports, whereupon submissions will be indexed and made discoverable to the world. Artificial intelligence will only be a benefit to people and society if we collectively record and learn from its failings. (Learn More)

post-image
Defining the AI Incident Management & Crisis Prevention Pipeline

By Omer Bilgin, Caio Vieira Machado

2026-09-29

As AI incidents become more frequent and severe, societies need reliable ways to identify harms early and keep them from becoming crises. Co...

Read More
The Database in Print

Read about the database at Time Magazine, Vice News, TechTalks, Wired, Bulletin of the Atomic Scientists, Stanford AI Index, Rolling Stone, the Guardian, Harvard Business Review, Brasil em Folhas, Newsweek, and other outlets.

Arxiv LogoTechTalks LogoWired LogoVice logoNewsweek logoTime logoBulletin of the Atomic Scientists logoStanford HAI logoRolling Stone logoThe Guardian logoHarvard Business Review logoBrasil em Folhas logo
The Responsible AI Collaborative

The AI Incident Database is a project of the Responsible AI Collaborative, an organization chartered to advance the AI Incident Database. The governance of the Collaborative is architected around the participation in its impact programming. For more details, we invite you to read the founding report and learn more on our board and contributors.

View the Responsible AI Collaborative's Form 990 and tax-exempt application. We kindly request your financial support with a donation.

Organization Founding Sponsor
Database Founding Sponsor
Sponsors and Grants
In-Kind Sponsors
The AI Incident Briefing
An envelope with a neural net diagram on its left

Create an account to subscribe to new incident notifications and other updates.

Research

  • Defining an “AI Incident”
  • Defining an “AI Incident Response”
  • Database Roadmap
  • Related Work
  • Download Complete Database

Project and Community

  • About
  • Contact and Follow
  • Apps and Summaries
  • Editor’s Guide

Incidents

  • All Incidents in List Form
  • Flagged Incidents
  • Submission Queue
  • Classifications View
  • Taxonomies

2026 - AI Incident Database

  • Terms of use
  • Privacy Policy
  • b74f812