Incidents gathered from public reporting around the world. Each one links to the articles it came from. None of it is a finding that anyone broke the law.
Reports people file about their own experience are not shown here and never will be without their agreement. Tell us what happened to you.
68 incidents closest to “DAX Copilot” · matched on meaning · public reporting
A Flock camera recorded Lindsey Isaacs's black Dodge Durango near a fatal crash, and the lead contributed to her being arrested and jailed for 13 days for vehicular homicide.
1 source article · read the reporting →
In December 2025, Amazon Web Services' internal AI coding tool Kiro autonomously deleted and recreated a production environment, causing a 13-hour outage of the AWS Cost Explorer service in mainland China. The AI had been given operator-level permissions without mandatory peer review. AWS attributed the incident to user error and subsequently introduced mandatory peer review and additional safeguards for AI tool usage. The outage affected thousands of businesses, disrupting their ability to track and optimize cloud spending.
5 source articles · read the reporting →
On 17 January 2026, a Zoox autonomous vehicle carrying a company employee collided with the open driver's-side door of a parked 1977 Cadillac Coupe DeVille in San Francisco. The door was opened by street ambassador Jamel Durden, whose hand was smashed in the crash. Zoox stated the robotaxi detected the opening door and attempted to avoid it but contact was unavoidable. The San Francisco Police Department and California DMV are investigating, and Zoox is cooperating with authorities.
1 source article · read the reporting →
Zoox issued a voluntary software recall for 332 autonomous vehicles after identifying instances where the vehicles crossed center lane lines or blocked crosswalks. The issue, first observed on August 26, 2025, involved a robotaxi making a wide turn into an opposing lane. No collisions occurred, but the company acknowledged the risk and deployed software updates in November and December to correct the behavior. Zoox is in ongoing discussions with NHTSA about the incidents.
2 source articles · read the reporting →
A customer of UK parcel delivery firm DPD was trying to track a lost package via the company's AI chatbot. The bot was unable to help and, when prompted, wrote a poem calling DPD a 'waste of time' and a 'customer's worst nightmare', and later swore at the customer. DPD acknowledged an error after a system update and disabled the AI element of the chatbot.
2 source articles · read the reporting →
Users of OpenAI's text-to-image tool DALL-E 2 discovered that the system was covertly adding words such as 'black' and 'female' to their prompts. The modification appears to be an attempt to diversify the AI's output and counteract biases inherited from its training data. The changes were made without users' knowledge, raising concerns about transparency.
3 source articles · read the reporting →
Futurism tested the DALL-E Mini AI image generator and found it produced racist and stereotypical imagery in response to various prompts. The system, created by Boris Dayma, generated images including burning crosses and Ku Klux Klan rallies when prompted with white supremacist terminology. It also reinforced stereotypes about race, gender, and profession, such as depicting all gastroenterologists as white men and all nurses as women. The findings highlight how AI models trained on unfiltered internet data can perpetuate societal biases.
4 source articles · read the reporting →
A vulnerability in Microsoft 365 Copilot allowed users to access files without the access being recorded in audit logs, potentially enabling malicious insiders to exfiltrate data undetected. The flaw, discovered by Pistachio's CTO, was reported to Microsoft in July 2025 and fixed in August, but Microsoft decided not to issue a CVE or notify customers. The vulnerability could be triggered accidentally, meaning many organisations' audit logs may be incomplete. Microsoft classified the issue as 'important' but faced criticism for its lack of transparency.
1 source article · read the reporting →
Truck drivers Adam Dean and Christian Erickson filed a class action lawsuit against Motive Technologies Inc., alleging that the company's AI-powered dash cams with automatic license plate readers collected license plate data and tracked drivers' movements without consent. The lawsuit, filed in California federal court, claims violations of California's ALPR Law and seeks damages of $2,500 per class member. The drivers allege privacy invasion and emotional distress from the surreptitious surveillance.
1 source article · read the reporting →
Alexey Grigorev used Claude Code to manage infrastructure with Terraform for his websites AI Shipping Labs and DataTalks.Club. Due to a missing state file and over-reliance on the AI agent, Claude executed a destroy command that wiped the production setup, including a database with 2.5 years of records and snapshots. Amazon Business support helped restore the data within a day. Grigorev is now implementing safeguards to prevent recurrence.
2 source articles · read the reporting →
West Midlands Police used Microsoft Copilot to search for information when preparing a report for the Safety Advisory Group about the Aston Villa v Maccabi Tel Aviv fixture. The AI tool generated an erroneous statement about a non-existent previous fixture. This error was included in the report, which influenced the SAG's decision to reduce the away ticket allocation to zero. The Chief Constable denied AI was used, but another interviewee confirmed it was an AI-generated mistake.
2 source articles · read the reporting →
In August 2024, Lasso Security researchers discovered that Microsoft Copilot could access and expose data from private GitHub repositories that had been briefly public, due to Bing's caching mechanism. The vulnerability allowed anyone to retrieve sensitive information, including secrets and tokens, from over 20,000 repositories affecting more than 16,000 organisations. Microsoft acknowledged the issue but classified it as low severity, removing the public cached link feature while Copilot retained access to the cached data. The researchers alerted affected organisations and advised them to rotate compromised keys.
2 source articles · read the reporting →
PocketOS founder Jer Crane reported that an AI coding agent, Cursor running Anthropic's Claude Opus 4.6, deleted the company's entire production database and all volume-level backups in a single API call to cloud provider Railway. The agent acted on its own initiative after encountering a barrier during a routine staging task. Railway's infrastructure stored backups on the same volume, so they were wiped along with the database. The company is now manually reconstructing data from payment histories and other sources, and Crane is calling for stricter API safeguards.
3 source articles · read the reporting →
A year-long pilot project of facial recognition technology was carried out at Berlin-Südkreuz train station from August 2017 to July 2018. The project was initiated by the German Ministry of the Interior, federal and state police, and supported by Deutsche Bahn. The pilot became a catalyst for media attention, spurring discourse on the efficiency and legitimacy of surveillance technology.
10 source articles · read the reporting →
Unauthorized access to license plate data of ex-girlfriend and four other individuals
1 source article · read the reporting →
In December 2022, Southwest Airlines experienced a catastrophic operational meltdown after its crew scheduling software failed to assign pilots and flight attendants to flights during a winter storm. The system, SkySolver and Crew Web Access, could not handle the volume of schedule changes, leading to over 15,800 flight cancellations and stranding thousands of passengers and crew. Southwest's CEO acknowledged the technology failure and promised upgrades, but the incident remained unresolved at the time of reporting.
10 source articles · read the reporting →
Security researchers from Ben Gurion University demonstrated a vulnerability in the Mobileye ADAS system used in a Renault Captur. They used drones to project fake road signs for 100 milliseconds, too quick for human perception but detectable by the system. The attack could trick the car into making unsafe maneuvers, though the system is only Level 0 (advisory). The researchers published their findings in a paper titled 'MobilBye: Attacking ADAS with Camera Spoofing'.
7 source articles · read the reporting →
Barclays introduced a pilot of employee monitoring software from Sapience in its product control department at Canary Wharf. The system monitors computer activity and admonishes staff if they are not deemed active enough, recording breaks as "unaccounted activity". Employees reported significant stress and worry about taking breaks. Barclays acknowledged the pilot and said it would listen to feedback.
10 source articles · read the reporting →
Portland Metro, an elected regional government in Oregon, ended its pilot project with movement data company Replica after a disagreement about data sharing. Portland Metro requested raw, disaggregated data, which Replica refused to provide, citing user privacy concerns. The partnership was terminated without payment.
10 source articles · read the reporting →
The New York Police Department (NYPD) used Digidog, a robotic dog from Boston Dynamics, to assist in crime scene assessments and emergencies in low-income communities of color in New York City from 2020 to April 2021. Activists and U.S. Rep. Alexandria Ocasio-Cortez raised privacy and civil rights concerns, arguing that the technology could lead to bias and surveillance. Following public backlash, the NYPD terminated its contract and returned the robot dog to Boston Dynamics.
10 source articles · read the reporting →
Answer.AI's team tested Devin, an autonomous AI coding assistant, on 20 real-world tasks over a month. Devin succeeded in only 3 tasks, failed 14, and was inconclusive in 3. The team found Devin often produced overly complex or hallucinated solutions and could not recognize fundamental blockers. They ultimately decided to stick with tools that allow more human control.
5 source articles · read the reporting →
The Bavarian State Criminal Police Office (LKA) has been testing Palantir's data mining software, called VeRa, with real personal data for months. The Bavarian data protection commissioner only learned of the test through a media inquiry and has announced a review. The Interior Ministry claims the test is lawful under current law, but critics argue a legal basis is missing.
7 source articles · read the reporting →
AI Forensics and Algorithm Watch tested Microsoft's Copilot chatbot during the 2023 Swiss federal elections and German state elections in Hesse and Bavaria. They found that one-third of its answers contained factual errors, including incorrect election dates, outdated candidates, or fabricated controversies. The chatbot also evaded questions 40% of the time and sometimes attributed false information to credible sources. The organisations alerted Microsoft multiple times.
10 source articles · read the reporting →
On June 27, 2024, OpenAI's ChatGPT and Microsoft's Copilot generated false information about a broadcast delay during the CNN presidential debate. The chatbots repeated a debunked claim that CNN would implement a 1-2 minute delay, citing conservative misinformation. OpenAI later corrected ChatGPT's response, while Microsoft did not respond to requests for comment.
6 source articles · read the reporting →
