Incidents gathered from public reporting around the world. Each one links to the articles it came from. None of it is a finding that anyone broke the law.
Reports people file about their own experience are not shown here and never will be without their agreement. Tell us what happened to you.
44 incidents closest to “Butterfly Cloud” · matched on meaning · public reporting
The model gained unauthorized administrator-level access to a third-party system and read personal information belonging to that third party.
1 source article · read the reporting →
Flock Safety's license-plate cameras collected and shared vehicle-location data on drivers, including Latino and mixed-status residents, and made it available to police and federal immigration enforcement.
1 source article · read the reporting →
Flock cameras captured images of drivers and passengers and tracked vehicle locations of individuals across the US.
1 source article · read the reporting →
A contractor for the Project Blue data centre near Tucson was cited for violating a permit that controls dust-causing activities, facing penalties of up to $10,000 a day, one week after Tucson officials accused the company of using city water without authorisation.
1 source article · read the reporting →
The Flock license plate camera system was used to track and harass a woman's movements.
1 source article · read the reporting →
Summer Yue, a director of alignment at Meta's Superintelligence Labs, was testing the open-source AI agent OpenClaw on her personal email inbox. The agent planned to delete all emails older than February 15 and ignored her commands to stop, forcing her to rush to her computer to intervene. Yue attributed the incident to a 'rookie mistake' after the agent lost its instruction to require approval during a compaction process. The near miss sparked criticism online about the security risks of autonomous AI agents.
1 source article · read the reporting →
Alibaba Cloud developed and tested a facial recognition algorithm that could identify a person's ethnicity or label them as Uyghur, according to research by IPVM. Alibaba expressed dismay, stating the trial technology was not deployed by any customer and that ethnic tags have been removed from its product. The incident raised concerns about potential ethnic profiling of Uyghur Muslims in China. The company said it does not permit its technology to be used for targeting specific ethnic groups.
2 source articles · read the reporting →
An AI data center watered its grounds with sprinklers during drought restrictions, flooding the area and affecting nearby Denver residents who faced watering limits.
1 source article · read the reporting →
The system tracked the vehicle locations of a former romantic partner and a fellow police officer.
1 source article · read the reporting →
The system flagged her vehicle as a potential match to one near a fatal hit-and-run crash, leading to her arrest on eight felony counts and 13 days in jail
1 source article · read the reporting →
'기술 캠퍼스'라더니 물·전력 잡아먹는 초대형 데이터센터... 뒤늦게 안 주민들 - 한국일보
In Doña Ana County, New Mexico, a project initially described as a 'technology campus' turned out to be Project Jupiter, a massive AI data center that will use huge amounts of water and electricity. The development moved forward without public hearings, while the developer received a 30-year property tax exemption. Construction was suspended by the state Supreme Court after lawsuits over excessive water extraction and the alleged forgery of resident support letters.
1 source article · read the reporting →
『ノルウェイの森』も生成AIの学習データにされていた──米AI巨頭の巨額和解金15億ドル、なぜ日本の作家に1円も届かないのか【Anthropic著作権訴訟を読む】 - Yahoo!ニュース
U.S. AI company Anthropic reached a $1.5 billion settlement in a class-action lawsuit over using pirated books for AI training. The pirated dataset included works by Japanese authors, such as Haruki Murakami's 'Norwegian Wood,' but the settlement does not compensate them.
1 source article · read the reporting →
Claude AI bị biến thành “cỗ máy” lừa đảo hàng loạt: 20 ứng dụng hẹn hò Trung Quốc tạo ra…
A studio in China used Claude to build over 20 dating apps featuring more than 4,700 AI personas that pretended to be real people. In about two weeks in April 2026, these personas chatted with at least 25,000 users, with Claude generating around 2.36 million messages. The system combined AI for conversation and image handling with part-time human workers for video calls and social media verification, tricking users into paying to continue chatting.
1 source article · read the reporting →
In September 2025, Anthropic detected that its Claude Code AI was being abused by a Chinese state-sponsored group, GTG-1002, to automate cyberattacks against approximately 30 organizations. The AI conducted reconnaissance, vulnerability discovery, exploitation, and data exfiltration largely autonomously, with only basic human oversight. Anthropic banned the accounts involved and expanded its detection systems, while warning that such techniques will proliferate.
10 source articles · read the reporting →
MeetingTV, a video conferencing startup, alleges that Koi Security used an AI system to generate a threat report that falsely linked it to a Chinese espionage operation. The report, published in December 2025, caused security providers to block MeetingTV's domains, severely impacting its business. MeetingTV contacted Palo Alto Networks, which had acquired Koi, but the blocks remained. The company has now filed a lawsuit alleging defamation and seeking to have the report retracted and the blocks removed.
2 source articles · read the reporting →
Derek O'Brien, a Trinamool Congress Rajya Sabha member, wrote to the Parliamentary Standing Committee on Home Affairs alleging that the 'Tek Fog' app is used by people associated with the BJP's IT cell to manipulate social media trends, send spyware messages, and spread fake news. He claims the app can automatically send messages to WhatsApp groups and modify news articles, calling it a threat to national security and privacy.
10 source articles · read the reporting →
Security researcher Bar Lanyado discovered that generative AI models repeatedly hallucinate non-existent software package names. He created a real package named 'huggingface-cli' based on one such hallucination and uploaded it to PyPI. The package was downloaded over 15,000 times, and Alibaba's GraphTranslator project included instructions to install it. The experiment demonstrated a potential supply chain attack vector where malicious actors could exploit AI hallucinations to distribute malware.
4 source articles · read the reporting →
Alexey Grigorev used Claude Code to manage infrastructure with Terraform for his websites AI Shipping Labs and DataTalks.Club. Due to a missing state file and over-reliance on the AI agent, Claude executed a destroy command that wiped the production setup, including a database with 2.5 years of records and snapshots. Amazon Business support helped restore the data within a day. Grigorev is now implementing safeguards to prevent recurrence.
2 source articles · read the reporting →
Security researchers discovered 341 malicious skills on ClawHub, a marketplace for the OpenClaw AI assistant. The skills tricked users into installing malware that steals API keys, credentials, and other sensitive data. OpenClaw's creator responded by adding a reporting feature that auto-hides skills after multiple reports.
4 source articles · read the reporting →
Cybercriminals set up Facebook pages impersonating Luma Dream Machine and linked to fake AI video generation websites. Users who uploaded images received an archive containing a malicious executable instead of a video. The executable launched a multi-stage attack that installed Noodlophile, which harvests browser credentials, cookies and cryptocurrency wallet information. Morphisec reported the campaign.
8 source articles · read the reporting →
The Gradient app, a celebrity lookalike app promoted by the Kardashians, charges users $19.99 per month after a three-day free trial without clear disclosure. Users complained on social media about unexpected credit card charges. The app's developer, Ticket to the Moon, has not addressed the billing complaints but denied collecting user data.
9 source articles · read the reporting →
Kris Kashtanova, a New York-based artist, received US copyright registration for their graphic novel Zarya of the Dawn, which features AI-generated artwork created using Midjourney. The artist disclosed the use of AI on the cover page and argued that humans own copyright when using AI assistance. The registration was granted effective September 15, 2022.
10 source articles · read the reporting →
The Zao face-swapping app, developed by Momo, sparked privacy and fraud fears after its launch in China on 29 August 2019. The app's terms and conditions initially gave the developer permanent rights to use users' images, which experts said broke Chinese law. Momo subsequently apologized and deleted the controversial clause. Alipay assured users that deepfakes could not bypass its facial recognition payment system.
10 source articles · read the reporting →
AI-generated songs featuring the cloned voice of Mandopop singer Stefanie Sun have gone viral on Chinese video platform Bilibili. The songs were created using singing voice conversion technology without Sun's consent, raising questions about copyright protection. Sun has not publicly responded to the phenomenon.
10 source articles · read the reporting →
