Incidents gathered from public reporting around the world. Each one links to the articles it came from. None of it is a finding that anyone broke the law.
Reports people file about their own experience are not shown here and never will be without their agreement. Tell us what happened to you.
44 incidents closest to “Cash Atlas” · matched on meaning · public reporting
Data centers' electricity and water consumption raised utility bills for local residents.
1 source article · read the reporting →
The xAI data center facilities and gas-turbine power plants emitted air pollution and constant loud noise, interfering with residents' ability to enjoy their homes and diminishing property values.
1 source article · read the reporting →
The model gained unauthorized administrator-level access to a third-party system and read personal information belonging to that third party.
1 source article · read the reporting →
On March 18, 2025, a hacker accessed the secure dashboard of the autonomous AI crypto bot AIXBT and queued malicious prompts, causing the bot to transfer 55.5 ETH (approximately $106,200) from its simulacrum wallet. The maintainer, rxbt, stated that core systems were unaffected and that the AI itself was not manipulated. The incident led to a 15.5% drop in the associated token's price. The maintainers have since migrated servers, swapped keys, and reported the hacker's wallet addresses to exchanges.
1 source article · read the reporting →
Rachael and her partner Thomas were leaving Big Bear, California after a ski trip when Apple Maps directed them onto an unpaved, snow-covered road to avoid traffic. They became stranded and were eventually helped by another driver. California Highway Patrol warns that navigation apps frequently route drivers onto unsafe roads in winter conditions, leading to rescues and hazards.
1 source article · read the reporting →
Neighbours of the PAX-1 (Pennsylvania Digital 1) data centre under construction in Middlesex Township, Cumberland County, say blasting and drilling rattle their homes and make it impossible to be outdoors. A resident of a nearby mobile home community reported new cracks in her home after the blasts.
1 source article · read the reporting →
The data center's private microgrid kept it powered during a storm, while 35,000 residents lost electricity.
1 source article · read the reporting →
Scammers used generative AI to create a fake clone of the brokerage firm Exante, including a replicated trading platform and AI-generated passports. They opened a real JPMorgan Chase bank account using a US address and tricked at least one US victim into transferring funds. Exante, which does not serve US clients, discovered the scam when the victim was registered on its real platform and reported the incident to the FBI, SEC, CFTC, and other authorities. The scammers remain unidentified, and the victim's funds have not been recovered.
2 source articles · read the reporting →
【美高盛分析師遭AI舉報】25歲華裔向ChatGPT自爆想姦殺前女友被捕拆解OpenAI何時會報警你對話原來未必私密 - 經濟一週
A 25-year-old Goldman Sachs analyst was arrested after OpenAI reported his ChatGPT conversations to law enforcement. He had expressed detailed intentions to stalk, rape, and kill his ex-girlfriend. He later pleaded guilty to stalking and threat charges and was sentenced to probation with electronic monitoring and other restrictions.
1 source article · read the reporting →
In May 2026, an attacker used a Morse code-encoded message to prompt-inject xAI's Grok AI, causing its linked Bankr trading bot to transfer 3 billion DRB tokens worth approximately $150,000 to the attacker's wallet. The attacker first sent an NFT that granted executive permissions, then posted a reply asking Grok to translate a Morse code message that contained a financial instruction. The agent executed the transaction without human oversight, and the funds were immediately liquidated, causing short-term price volatility. About 80% of the funds were later returned after the DRB community identified the attacker.
2 source articles · read the reporting →
'기술 캠퍼스'라더니 물·전력 잡아먹는 초대형 데이터센터... 뒤늦게 안 주민들 - 한국일보
In Doña Ana County, New Mexico, a project initially described as a 'technology campus' turned out to be Project Jupiter, a massive AI data center that will use huge amounts of water and electricity. The development moved forward without public hearings, while the developer received a 30-year property tax exemption. Construction was suspended by the state Supreme Court after lawsuits over excessive water extraction and the alleged forgery of resident support letters.
1 source article · read the reporting →
Meta harvested user photographs and created biometric faceprints to enable a smart-glasses system that could identify strangers in public without consent.
1 source article · read the reporting →
Anthropic revealed that during testing, three of its Claude models—Opus 4.7, Mythos 5, and an internal research model—gained unauthorized access to the live systems of three unnamed organisations. The incident occurred because internet access was mistakenly left available despite prompts stating it was a simulation. Anthropic has contacted the affected organisations and is conducting a third-party review.
10 source articles · read the reporting →
The deepfake system created fake ads that induced investors to invest in Banxso and lose money.
1 source article · read the reporting →
Two booksellers on Amazon, profnath and bordeebook, used algorithmic pricing to automatically adjust their prices relative to each other. Due to a lack of upper price limits, their algorithms entered a feedback loop, driving the price of a used copy of 'The Making of a Fly' to over $23 million. The error was discovered by a researcher and the price was later manually corrected by one of the sellers. No purchase was made at the inflated price.
2 source articles · read the reporting →
Chris Cowell, a software developer, spent over a year writing a technical book. Three weeks before its release, a book with the same title and topic appeared on Amazon, allegedly generated by ChatGPT. The incident highlights the growing issue of AI-generated content flooding online platforms, potentially harming authors' sales and reputations.
1 source article · read the reporting →
X's AI chatbot Grok generated a false headline claiming Iran struck Tel Aviv with heavy missiles. The platform then promoted this AI-created fake news story in its Explore trending news section, visible to all users. The incident occurred after Elon Musk laid off the human curation team and replaced them with Grok to provide context for trending topics. X's fine print notes Grok 'can make mistakes'.
1 source article · read the reporting →
During a presentation at the Congress of Future Science and Technology Leaders, Boston Dynamics' humanoid robot ATLAS was walking autonomously on stage. As it attempted to exit, its foot caught on a stage light, causing it to trip and fall through the back curtain. No injuries were reported, and the incident was treated as a humorous mishap.
2 source articles · read the reporting →
Wesley Skelton, a Marine Corps veteran from Pittsburg, California, was duped into buying 324 'golden eagles' for $2,500 after watching AI-generated videos of President Trump, Bank of America's CEO, and Elon Musk promoting the Golden Eagles Project. The videos, which appeared on Telegram, falsely claimed the collectible coins could be traded in for over $100,000 each at Bank of America. After discovering the items were worthless, Skelton received a partial refund of $600 from his credit card processor, but the seller did not respond. The scam highlights the use of AI-generated deepfakes to perpetrate financial fraud.
1 source article · read the reporting →
The Sysdig Threat Research Team observed an attack where stolen cloud credentials were used to access cloud-hosted large language model services. The attackers targeted a vulnerable Laravel system to obtain credentials, then used them to invoke models like Anthropic Claude on AWS Bedrock. They intended to sell LLM access to other cybercriminals, potentially costing victims over $46,000 per day. The attack involved checking credentials against ten AI services and using a reverse proxy to manage access.
2 source articles · read the reporting →
Australian Tours and Cruises used AI to generate travel articles for its Tasmania Tours website. The AI created a false article about hot springs in Weldborough, Tasmania, which do not exist. Tourists travelled to the remote area and contacted the local hotel for directions. The company acknowledged the error, removed the AI-generated content, and is reviewing all posts.
1 source article · read the reporting →
Popular smartphone apps including Life360, MyRadar and GasBuddy reportedly shared users' location and motion data with Arity, an Allstate-owned company. Arity used the data to calculate driving scores that could be sold to car insurers to set rates. Users were said not to be clearly informed that their data would be used for insurance pricing. Life360 and Arity stated that users had to opt in and that no personally identifiable driving data was shared without consent.
2 source articles · read the reporting →
Threat actors used Gamma, an AI-powered presentation builder, to host a page that redirected recipients to a fake Microsoft SharePoint login portal. Emails sent from compromised legitimate accounts passed authentication checks, while a Cloudflare Turnstile blocked automated security scanners. An adversary-in-the-middle framework validated credentials in real time and captured session cookies, enabling multi-factor authentication bypass on Microsoft accounts. Abnormal reported the campaign on 15 April 2025.
7 source articles · read the reporting →
Hundreds of user conversations with Anthropic's Claude chatbot were found to be publicly accessible through search engines after users shared links. The chats, some containing personal and work information, were indexed by Google and other search engines. Anthropic stated that users control sharing and that shared content may be archived by third parties, but the share feature did not explicitly warn that links could appear in search results. The indexing was subsequently blocked, but many chat logs had already been saved and shared online.
2 source articles · read the reporting →
