Incidents gathered from public reporting around the world. Each one links to the articles it came from. None of it is a finding that anyone broke the law.
Reports people file about their own experience are not shown here and never will be without their agreement. Tell us what happened to you.
44 incidents closest to “D2L Link” · matched on meaning · public reporting
The court imposed a $15,000 sanction on the attorney for submitting AI-generated false citations.
1 source article · read the reporting →
Unimore Racing, scontro in pista per l’auto senza pilota a Imola - Gazzetta di Modena
At Imola's Enzo e Dino Ferrari circuit, the driverless cars of Unimore Racing and Politecnico di Milano battled for the lead in the autonomous racing championship. With two laps remaining, the two cars, running first and second, collided, forcing both to retire.
1 source article · read the reporting →
Student suing Genesee County over Flock cameras FOX 2 Detroit
1 source article · read the reporting →
In June 2016, a hacker exploited a recursive call vulnerability in The DAO's smart contract split function, draining approximately 3.6 million Ether worth tens of millions of dollars. The Ethereum community debated responses and ultimately implemented a hard fork on July 20, 2016, to return the stolen funds to investors. The incident sparked discussions about code as law and the immutability of blockchains, leading to the split between Ethereum and Ethereum Classic.
10 source articles · read the reporting →
Security researchers at CodeWall used an autonomous offensive agent to discover a SQL injection vulnerability in McKinsey's internal AI platform, Lilli. The vulnerability allowed unauthenticated access to the production database, exposing 46.5 million chat messages, 728,000 files, and 57,000 user accounts. The researchers responsibly disclosed the issue to McKinsey, who patched the endpoints within days. No data was exfiltrated or misused, and no disruption occurred.
1 source article · read the reporting →
The Sysdig Threat Research Team observed an attack where stolen cloud credentials were used to access cloud-hosted large language model services. The attackers targeted a vulnerable Laravel system to obtain credentials, then used them to invoke models like Anthropic Claude on AWS Bedrock. They intended to sell LLM access to other cybercriminals, potentially costing victims over $46,000 per day. The attack involved checking credentials against ten AI services and using a reverse proxy to manage access.
2 source articles · read the reporting →
Users of OpenAI's text-to-image tool DALL-E 2 discovered that the system was covertly adding words such as 'black' and 'female' to their prompts. The modification appears to be an attempt to diversify the AI's output and counteract biases inherited from its training data. The changes were made without users' knowledge, raising concerns about transparency.
3 source articles · read the reporting →
Ernie Smith, writer of the Tedium newsletter, received a DMCA copyright notice from 'Commonwealth Legal', a firm that appears to be entirely fabricated using AI-generated images and text. The notice demanded he add a backlink to the gadget review site Tech4Gods for a keyfob photo legitimately sourced from Unsplash. The scheme is designed to generate fake SEO gains through backlinks, and Smith did not receive any follow-up after the stated deadline.
1 source article · read the reporting →
Threat actors used Gamma, an AI-powered presentation builder, to host a page that redirected recipients to a fake Microsoft SharePoint login portal. Emails sent from compromised legitimate accounts passed authentication checks, while a Cloudflare Turnstile blocked automated security scanners. An adversary-in-the-middle framework validated credentials in real time and captured session cookies, enabling multi-factor authentication bypass on Microsoft accounts. Abnormal reported the campaign on 15 April 2025.
7 source articles · read the reporting →
In February 2012, the New York City Department of Education publicly released individual Teacher Data Reports rating over 12,000 teachers based on value-added analysis of student test scores. The ratings, originally intended for internal use, were disclosed after a court ruled in favor of media organizations under the Freedom of Information Act. The teachers' union and education experts criticised the data as unreliable due to large margins of error and failure to account for demographic factors, warning that the release would unfairly shame or praise educators. The Department defended the ratings as a useful perspective on teacher effectiveness.
6 source articles · read the reporting →
The system generated fabricated legal citations and quotes in a court filing, misleading the court and opposing counsel.
1 source article · read the reporting →
Cybercriminals set up Facebook pages impersonating Luma Dream Machine and linked to fake AI video generation websites. Users who uploaded images received an archive containing a malicious executable instead of a video. The executable launched a multi-stage attack that installed Noodlophile, which harvests browser credentials, cookies and cryptocurrency wallet information. Morphisec reported the campaign.
8 source articles · read the reporting →
The AI generated fake legal citations that were included in an appellate brief, misleading the court and the opposing party.
1 source article · read the reporting →
The AI generated fabricated case law that was included in a court filing, misleading the court and resulting in sanctions against the litigant.
1 source article · read the reporting →
The AI-generated court filing contained fabricated case law, leading to a monetary sanction against the party represented by the lawyer.
1 source article · read the reporting →
Wisconsin’s Dropout Early Warning System (DEWS) uses machine learning to predict middle school students' likelihood of graduating on time, relying on factors including race and income. The Markup found the algorithm frequently mislabels students, with a higher false alarm rate for Black and Hispanic students. The Wisconsin Department of Public Instruction has not informed schools of the racial disparities and continues to use the system.
10 source articles · read the reporting →
The Central Board of Secondary Education (CBSE) has introduced a facial recognition system for Class 10 and 12 students to access their digital academic documents. A live image of the student is compared with the photograph on their CBSE admit card and, if the match succeeds, the certificate is emailed to them. The facility is available on Digi Locker for 2020 records and is expected to help foreign students and those unable to open a Digi Locker account.
10 source articles · read the reporting →
Dartmouth College's Geisel School of Medicine charged 17 students with cheating on remote exams during the pandemic. The charges were based on secret tracking of student activity on the learning management system. Critics say the system is prone to errors and inappropriate for monitoring students.
10 source articles · read the reporting →
AI-generated fake legal citations were included in a court filing, resulting in monetary sanctions against the attorney and his law firm.
1 source article · read the reporting →
The AI generated fake legal citations that were included in a court filing, misleading the court and opposing counsel.
1 source article · read the reporting →
The AI-generated hallucinated citations in an expert report led to the exclusion of the expert and dismissal of the plaintiff's case.
1 source article · read the reporting →
The AI generated legal briefs containing fabricated citations, which were submitted to the Connecticut Supreme Court.
1 source article · read the reporting →
The AI generated fabricated legal citations that were submitted to the bankruptcy court.
1 source article · read the reporting →
AI generated hallucinated legal citations that were filed in court, misleading the court and opposing counsel.
1 source article · read the reporting →
