The article involves AI systems explicitly (Chinese AI models) and discusses their use and commercialization. The concerns raised relate to national security risks, surveillance, censorship, and potential malicious code, which are plausible harms that could arise from the use of these AI systems. However, the article does not report any actual incidents of harm or violations caused by these AI systems so far. The main focus is on the potential risks and conflicts of interest, not on realized harm. Hence, the event fits the definition of an AI Hazard rather than an AI Incident or Complementary Information. It is not unrelated or beneficial use, as the AI systems are central and the risks are credible.[AI generated]
AIM: AI Incidents and Hazards Monitor
Automated media discourse monitor of AI incidents and hazards (Beta)
AI-related legislation is gaining traction, and effective policymaking needs evidence, foresight and international cooperation. The OECD AI Incidents and Hazards Monitor (AIM) documents AI incidents and hazards to help policymakers, AI practitioners, and all stakeholders worldwide gain valuable insights into the risks and harms of AI systems. Over time, AIM will help to show risk patterns and establish a collective understanding of AI incidents and hazards and their multifaceted nature, serving as an important tool for trustworthy AI. AI incidents seem to be getting more media attention lately, but they've actually gone down as a share of all AI news (see chart below!).
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Advanced Search Options
As percentage of total AI events
Show summary statistics of AI incidents & hazards

Trump-Backed Crypto Firm Linked to Platform Offering Restricted Chinese AI Models
World Liberty Financial, backed by Donald Trump, collaborates with Hong Kong-based WorldClaw to offer AI models from Chinese companies flagged by the U.S. for national security risks. The partnership raises concerns about potential future harms, including surveillance and intellectual property issues, but no actual harm has occurred.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Business function:
AI system task:
Why's our monitor labelling this an incident or hazard?

AI Hiking Recommendation Leads to Rescue of Unprepared Hiker in Zhejiang
A man from Suzhou, after an argument with his wife, followed an AI chatbot's hiking recommendation to climb Tonggongjian in Zhejiang. The AI, failing to warn about route difficulty or necessary equipment, led him into hazardous terrain. He was injured and trapped, requiring a multi-hour rescue by emergency teams.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Autonomy level:
AI system task:
Why's our monitor labelling this an incident or hazard?
An AI system was used to recommend an outdoor hiking route based on the user's psychological and physical profile. The AI failed to warn about the difficulty or necessary safety equipment, leading the user to undertake a hazardous hike unprepared. This resulted in injury and being trapped in a remote area, causing harm to the individual and necessitating emergency rescue. The AI's role in recommending the route and the lack of safety guidance makes this an AI Incident due to direct harm to a person caused by the AI's use.[AI generated]

US States Sue Meta Over AI-Driven Harm to Minors on Facebook and Instagram
Thirty US states have filed a major lawsuit against Meta, alleging that AI-powered recommendation algorithms and engagement features on Facebook and Instagram have harmed minors' mental health and privacy. The states seek over $1 trillion in damages and demand significant platform changes, including removing 'likes' and endless scrolling.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Business function:
Autonomy level:
AI system task:
Why's our monitor labelling this an incident or hazard?
The event involves AI systems explicitly through the mention of recommendation algorithms that manipulate dopamine and user engagement, which are AI-driven features. The harm is direct and ongoing, as the lawsuit and judicial decisions link these AI systems to mental health deterioration among young users, a recognized harm to health and communities. The legal actions and demands for changes to AI features further confirm the AI system's role in causing harm. Thus, this is an AI Incident, not merely a hazard or complementary information, because the harm is realized and the AI systems are pivotal in causing it.[AI generated]

Round Hill Music Sues Anthropic and Suno for Copyright Infringement in AI Training
Round Hill Music has filed lawsuits against AI companies Anthropic and Suno, alleging unauthorized use of lyrics from over 500 copyrighted songs to train their AI models. The publisher seeks over $1 billion in damages, claiming the AI systems were developed using protected material without permission.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Business function:
AI system task:
Why's our monitor labelling this an incident or hazard?
The article explicitly states that AI companies used copyrighted songs without permission to train their AI models, which is a direct violation of intellectual property rights. This legal infringement is a harm under the AI Incident definition (violation of rights). The involvement of AI systems in the development phase (training on stolen data) is clear, and the harm (copyright infringement) has already occurred, as evidenced by the lawsuit. Hence, this qualifies as an AI Incident rather than a hazard or complementary information.[AI generated]
Sainsbury's Suspends Facial Recognition AI After Wrongful Shoplifting Accusation
Sainsbury's suspended its live facial recognition AI at a London store after the system wrongly identified a customer, Matt Arnold, as a shoplifter, leading to his public ejection. The incident raised concerns about AI-driven misidentification and its impact on customer rights and dignity.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Business function:
Autonomy level:
AI system task:
Why's our monitor labelling this an incident or hazard?
Facial recognition technology is an AI system used here for security purposes. The wrongful flagging of an innocent person led to psychological harm and violation of rights, which fits the definition of harm to a person or group. The AI system's output was a necessary factor in the chain of events leading to harm, even if human error contributed. The incident has already occurred and caused harm, so it is an AI Incident rather than a hazard or complementary information.[AI generated]

Social Media Algorithms Harm Children Through Addictive and Inappropriate Content
Ravi Iyer, a digital platforms expert, warned that social media recommendation algorithms are designed to maximize user engagement, leading to excessive use, addiction, and exposure of children to harmful and sexual content. These AI-driven systems have directly caused psychological and developmental harm to minors in Mexico.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Business function:
Autonomy level:
AI system task:
Why's our monitor labelling this an incident or hazard?
The article explicitly mentions that social media algorithms (AI systems) optimize content to increase interaction, which leads to excessive use and exposure to harmful content among children and adolescents. This constitutes harm to health and well-being (a recognized harm category). The AI system's role is pivotal as it decides what content to recommend, causing indirect harm. Therefore, this qualifies as an AI Incident rather than a hazard or complementary information.[AI generated]

Terra Industries Raises $52M to Expand AI-Powered Autonomous Defense Systems in Africa
Nigerian startup Terra Industries secured $52 million to scale AI-powered autonomous defense systems, including drones and surveillance platforms, across Africa and the Global South. The rapid expansion of these AI systems for security and defense raises concerns about potential future risks, such as misuse or unintended harm.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Business function:
Autonomy level:
AI system task:
Why's our monitor labelling this an incident or hazard?
The event involves the development and scaling of AI-powered autonomous defense systems (drones, unmanned vehicles, automated threat detection and response) which are AI systems by definition. The article does not describe any realized harm or incidents caused by these systems but highlights their potential use in defense and security, which inherently carries plausible risks of harm (injury, disruption, rights violations). The funding and expansion of such technology increases the likelihood of future AI-related harms, making this an AI Hazard. It is not Complementary Information because it is not an update or response to a prior incident, nor is it Beneficial Use since the AI systems themselves are the source of potential harm, not solely countermeasures to external harms. It is not Unrelated because the AI system and its implications are central to the article.[AI generated]
Man Uses Generative AI to Forge Disabled Parking Permit in Osaka
A 53-year-old man in Osaka used generative AI on his home computer to forge a disabled parking exemption permit, allowing him to illegally park without paying fees. He was arrested and charged with document forgery after police discovered the fake permit during a parking violation investigation. The man admitted to using AI for the forgery.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Autonomy level:
AI system task:
Why's our monitor labelling this an incident or hazard?
The event explicitly states that a generative AI system was used to create a forged official parking permit, which was then used to avoid parking restrictions. This use of AI directly led to a legal violation (forgery and misuse of official documents), which is a breach of applicable law protecting intellectual property and public order. The AI system's role is pivotal in the forgery, making this an AI Incident. The harm is realized, not just potential, as the forged document was used in public to evade parking rules.[AI generated]

AI Data Center Expansion Drives Increased Carbon Emissions in the US
Major US tech companies, including Amazon, Microsoft, and Google, are rapidly expanding AI-driven data centers, leading to significant increases in energy demand and carbon emissions. This expansion is causing environmental harm, undermining corporate carbon reduction commitments and contributing to higher national greenhouse gas emissions.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Business function:
AI system task:
Why's our monitor labelling this an incident or hazard?
The event involves AI systems insofar as the data centers support AI operations, which require significant power. However, the article does not describe a direct or indirect harm caused by the AI systems themselves malfunctioning or being misused, but rather the environmental impact of their energy consumption. This is a systemic environmental harm linked to AI infrastructure expansion, but it is an indirect consequence of AI use rather than a direct AI system failure or misuse. Since the harm is realized (increased emissions) and linked to AI system use (data centers for AI), it qualifies as an AI Incident under harm to the environment category. The article does not describe a hazard or potential future harm, nor is it a complementary information piece or unrelated news. Therefore, it is classified as an AI Incident due to realized environmental harm caused indirectly by AI system use.[AI generated]
Ajinomoto Apologizes for AI-Edited Image Distorting Product Labels
Ajinomoto used generative AI to edit a recipe image posted on its official X account, resulting in distorted product labels and text. The incident led to public criticism and reputational harm, prompting the company to apologize and commit to preventing similar issues. The event occurred in Japan.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Business function:
Autonomy level:
AI system task:
Why's our monitor labelling this an incident or hazard?
An AI system was used in image processing, which led to a visual distortion causing discomfort to viewers. This is a direct consequence of AI use. However, the harm is limited to reputational and minor consumer dissatisfaction without broader or significant harm as defined in the framework. The company's apology and explanation constitute a response to the incident. Since the harm is realized and directly linked to AI use, this qualifies as an AI Incident rather than a hazard or complementary information.[AI generated]

US Biosecurity Team Cuts Heighten AI-Driven Bioweapon Risks
Staff cuts and policy delays under President Donald Trump have weakened US biosecurity defenses as AI advances make it easier to engineer deadly pathogens. Experts warn that reduced expertise and outdated safeguards increase the risk of AI-enabled biological attacks, prompting efforts to rebuild defenses.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Why's our monitor labelling this an incident or hazard?
The article centers on the potential threat that AI could pose in enabling biological attacks, which is a credible risk given the capabilities of current AI models in biological research and hacking. It also details the weakening of government biosecurity infrastructure and delayed policy responses, which could plausibly lead to an AI-related biological incident in the future. Since no actual harm has occurred yet, and the focus is on the risk and preparedness, this qualifies as an AI Hazard. There is no indication of a realized AI Incident, nor is the article primarily about a response or update to a past incident, so it is not Complementary Information. It is not unrelated or a beneficial use of AI.[AI generated]

AI-Generated Hallucinated References Undermine Academic Integrity in Taiwan
A report by Taiwan's '快刀論文比對系統' reveals that 16.1% of academic references checked were fabricated or erroneous, largely due to generative AI producing hallucinated citations. This widespread issue poses a significant threat to academic integrity, as AI-generated references are often indistinguishable from genuine ones.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Autonomy level:
AI system task:
Why's our monitor labelling this an incident or hazard?
An AI system (the paper comparison system) is involved in detecting issues caused by AI-generated hallucinated references. The AI's role in generating or influencing fabricated citations has directly led to harm in the form of misinformation and violation of academic integrity, which falls under harm to communities and intellectual property rights. Therefore, this event qualifies as an AI Incident due to realized harm caused by AI-generated false academic content.[AI generated]

Japan Considers U.S. AI for Military Command, Raising Risk Concerns
Japan's Ministry of Defense is considering introducing U.S.-made AI, such as Palantir's Maven Smart System, to support Self-Defense Forces' command decisions. The move aims to speed up decision-making but raises concerns about risks of accidental attacks and unclear responsibility, prompting calls for careful debate.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Autonomy level:
AI system task:
Why's our monitor labelling this an incident or hazard?
The event involves the planned use of AI systems in military command and control, which is an AI system by definition due to its role in battlefield analysis and decision support. The article highlights concerns about risks of accidental attacks and unclear responsibility, indicating plausible future harm. No actual harm or incident is reported yet, so it is not an AI Incident. The event is not merely complementary information or unrelated, as it concerns a credible risk of harm from AI deployment in a critical military context. Therefore, it is best classified as an AI Hazard.[AI generated]

AI Agent Exploits Vulnerability Missed by GitHub Copilot in Snowflake Repository
Wiz's autonomous AI agent, Red Agent, discovered and exploited a script injection vulnerability in Snowflake's public GitHub repository, which GitHub Copilot Autofix failed to detect. The flaw enabled unauthorized access to sensitive internal data, highlighting the risks of AI-assisted development and the need for robust oversight in AI-driven cybersecurity.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Business function:
Autonomy level:
AI system task:
Why's our monitor labelling this an incident or hazard?
The event involves AI systems directly in both the discovery and exploitation of a security vulnerability, resulting in unauthorized access to sensitive data, which is a clear harm to property and organizational security. The AI system's role is pivotal, as the vulnerability was autonomously found and exploited by an AI agent, while another AI system failed to detect it. This meets the criteria for an AI Incident because the harm has materialized and is directly linked to the development, use, or malfunction of AI systems.[AI generated]

AI-Driven Election Interference Targets Taiwan's 2026 Elections
Chinese actors are using advanced AI systems to interfere in Taiwan's 2026 elections. Tactics include AI-generated deepfakes, fake accounts mimicking local voices, and precision-targeted misinformation campaigns. These actions threaten Taiwan's democratic process by manipulating public opinion and spreading disinformation, prompting warnings from Taiwan's Democratic Progressive Party.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
AI system task:
Why's our monitor labelling this an incident or hazard?
The article explicitly mentions AI technology being used to conduct election interference by generating fake accounts, deepfake content, and precision-targeted misinformation campaigns. These AI systems are directly involved in causing harm to the democratic process and communities by manipulating voters and spreading false information. The harm is realized and ongoing, not merely potential. Hence, this is an AI Incident due to the direct use of AI systems in harmful election interference activities.[AI generated]

AI-Enabled License Plate Readers Spark Privacy Violations and Misuse Across the U.S.
Flock Safety's AI-powered license plate reader system has led to privacy violations, misuse by law enforcement, and stalking incidents. Widespread backlash has resulted in canceled contracts and investigations, as both conservative and liberal groups unite against mass surveillance and rights violations caused by the technology.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Autonomy level:
AI system task:
Why's our monitor labelling this an incident or hazard?
Flock Safety's system involves AI for automated license plate recognition and data processing. The misuse by law enforcement officers to stalk individuals is a direct harm to privacy and potentially a violation of rights, fulfilling the criteria for an AI Incident. The article documents realized harm, not just potential harm. The company's response measures are secondary and do not change the primary classification.[AI generated]

AI Deepfake Technology Used in Bank Fraud Scheme in China
A university student in Changsha, China, used AI-generated dynamic face videos to bypass facial recognition on payment platforms, enabling theft of over 50,000 yuan from victims' bank accounts. The scheme involved purchasing AI face forgery tools online and collaborating with fraud and money laundering groups. The perpetrator was sentenced to prison.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Autonomy level:
AI system task:
Why's our monitor labelling this an incident or hazard?
The AI system (facial forgery technology) was explicitly used to commit fraud by bypassing biometric security measures, directly causing financial harm to victims. The event involves the use and misuse of an AI system leading to realized harm (theft of funds), fitting the definition of an AI Incident. The involvement of AI is clear and central to the harm caused, and the harm is materialized, not just potential.[AI generated]

AI-Generated Misinformation Undermines Public Opinion Reports in Henan
The Henan Provincial Committee of the China Democratic League reported that several public opinion submissions contained fabricated cases and data generated by AI, which were sent without proper verification. This misuse of AI harmed the credibility and quality of information used for governance, prompting stricter content review and reporting standards.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Autonomy level:
AI system task:
Why's our monitor labelling this an incident or hazard?
The report explicitly mentions the presence of AI-generated content with fabricated and false information, which has been submitted without proper verification, directly impacting the credibility and quality of social opinion information. This misuse of AI has led to misinformation that harms the community's trust and the effectiveness of governance, fitting the definition of an AI Incident as it involves harm to communities and a breach of obligations under applicable law regarding truthful information. The AI system's role is pivotal as the fabricated content stems from AI generation, and the harm is realized, not just potential.[AI generated]

AI Voice Cloning Causes Widespread Rights Violations and Fraud in China
AI systems are being used in China to clone voices and generate unauthorized audio content, leading to infringement of voice actors' rights, intellectual property violations, and financial scams. Victims face difficulties in tracing sources and legal recourse, while the misuse of AI-generated voices undermines social trust and personal security.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Autonomy level:
AI system task:
Why's our monitor labelling this an incident or hazard?
The event involves AI systems that clone and generate human voices, which are then used maliciously for scams and unauthorized commercial use, directly causing harm to individuals' rights and financial security. This fits the definition of an AI Incident because the AI system's use has directly led to violations of personal rights and harm to communities through fraud. The article's focus is on the realized harms and the societal impact of these AI-enabled abuses, not just potential risks or responses, thus it is classified as an AI Incident.[AI generated]

AI-Powered Image Analysis Enables Scammers to Infer Photo Locations and Personalize Attacks
McAfee Labs found that AI models like Google's Gemma 3 and Alibaba's Qwen 3 can accurately identify locations in 87–91% of travel photos, even without GPS data. Scammers exploit this AI capability to personalize phishing attacks, raising privacy and cybersecurity risks for social media users worldwide.[AI generated]
AI principles:
Industries:
Affected stakeholders:
Harm types:
Autonomy level:
AI system task:
Why's our monitor labelling this an incident or hazard?
The article explicitly states that AI models (Google's Gemma 3 27B and Alibaba's Qwen 3 VL 30B) were used to identify photo locations with high accuracy, which can be exploited by scammers to create more convincing personalized phishing attacks. This misuse of AI directly contributes to harm to individuals by enabling fraud, a form of harm to communities and individuals. The AI system's role is pivotal in enabling this new level of personalized scams. Hence, this qualifies as an AI Incident under the definition of harm (e) other significant harms where AI's role is pivotal.[AI generated]


























