Lenovo chatbot breach highlights AI security blind spots in customer-facing systems - csoonline.com
Lenovo chatbot breach highlights AI security blind spots in customer-facing systems csoonline.com
- Company
- Lenovo
- AI system
- Lena
Incidents gathered from public reporting around the world. Each one links to the articles it came from. None of it is a finding that anyone broke the law.
Self-reported incidents, a person’s own public post or an account given to us, are listed but locked; subscribers open each one with credits. Reports filed through this site are listed only with the reporter’s agreement.
Press reportingSelf-reported: a person’s own public post · 10 creditsSelf-reported: told to us directly · 25 credits
Lenovo chatbot breach highlights AI security blind spots in customer-facing systems csoonline.com
AI system recorded and analyzed calls between a dental company and its patients
The AI system intercepted and recorded a customer's phone call and collected her personal and financial information without consent.
The system collected and used voiceprints to verify callers' identities without their knowledge or consent.
The AI chatbot offered a buy-back price of $27,162.79 to customer Zack Giacomelli for his BMW.
The system exposed sensitive personal files of individuals who used chatbots built by WotNot's customers.
The chatbot recorded and stored the plaintiff's entire conversation, including keystrokes and mouse clicks, without his knowledge.
The AI support chatbot changed the email address associated with Instagram accounts, granting hackers access.
The system collected and stored voiceprints of customers placing phone orders without their consent.
The AI chatbot shared user data with tech giants.
The chatbot provided responses to children
Denied or canceled insurance policies and delayed claim payments to policyholders, disproportionately affecting Black and nonwhite, disabled, and abuse survivor policyholders.
The AI-generated legal briefs with hallucinated cases were used to deny Hannah Payne's motion for a new trial.
The AI generated a court filing containing non-existent legal cases, misleading the court and opposing counsel.
The AI generated non-existent court case citations that were presented to the High Court, misleading the judge and opposing counsel.
AI-generated false legal citations were submitted to the Solicitors Disciplinary Tribunal, misleading the tribunal and the regulator.
The AI system generated fake legal citations that were submitted to the court, resulting in a fine for contempt.
AI-generated fake legal citations were submitted to the court, affecting the plaintiff's appeal and the defendant's legal costs.
The AI system generated a non-existent insolvency rule that was submitted to the court, misleading the court.
The AI generated fictitious legal citations that were submitted to the court in a legal filing.
The AI-generated fictitious case citations misled the court and caused opposing counsel to incur attorney's fees.
Attorney H. Gregory Harp was sanctioned with a public reprimand, disqualification from the case, a six-month court suspension, and a bar referral for filing AI-hallucinated legal citations and deleting evidence.
The AI system generated legal briefs containing fabricated case citations, which were filed in court, affecting the court and the opposing party.
The AI generated fictitious legal authorities and arguments that were filed in a court motion, misleading the court and opposing counsel.
Each incident is written from the reporting or the account it cites. A report is an allegation, not a finding.