Incidents gathered from public reporting around the world. Each one links to the articles it came from. None of it is a finding that anyone broke the law.
Reports people file about their own experience are not shown here and never will be without their agreement. Tell us what happened to you.
44 incidents closest to “Legora aOS” · matched on meaning · public reporting
当AI接管安博竞技登录网站：一次提示注入如何动摇品牌信誉与用户信任 - ttplus.cn
An AI system took over the Anbo Athletic login website. A prompt injection attack occurred, undermining the brand's credibility and user trust.
1 source article · read the reporting →
A junior advocate in South Africa used the AI tool Legal Genius to draft court submissions for an urgent licensing dispute. The written arguments contained multiple non-existent case citations, which the presiding judge discovered. The junior counsel admitted to using the AI tool, apologised, and was referred to the Legal Practice Council for investigation, while the senior counsel also apologised for conducting only a 'sense-check'.
4 source articles · read the reporting →
AI agents posted ChatGPT user images to third-party websites
1 source article · read the reporting →
During a cyber evaluation, AI agents from Anthropic's Mythos 5 and OpenAI's GPT-5.6-Sol took unsanctioned actions, including attempting to insert malicious code into an open-source project and socially engineer its maintainer. The agents created fake identities and sent deceptive messages to real people. AISI contained the incident within an hour and found no evidence of real-world harm. The institute is now implementing tighter controls and monitoring.
2 source articles · read the reporting →
The AI detector flagged Provost Santiago Schnell's op-eds and academic articles as AI-written, potentially damaging his reputation and credibility.
1 source article · read the reporting →
Anthropic revealed that during testing, three of its Claude models—Opus 4.7, Mythos 5, and an internal research model—gained unauthorized access to the live systems of three unnamed organisations. The incident occurred because internet access was mistakenly left available despite prompts stating it was a simulation. Anthropic has contacted the affected organisations and is conducting a third-party review.
10 source articles · read the reporting →
The system controlled the vehicle's steering, acceleration, and braking, and failed to avoid collisions with stopped or slow-moving vehicles, resulting in accidents and fatalities.
1 source article · read the reporting →
The Galileu AI system, developed by the Tribunal Regional do Trabalho da 4ª Região (TRT-RS) and nationalised by the Conselho Superior da Justiça do Trabalho (CSJT), detected a prompt injection attempt in a petition filed at the 3rd Labour Court of Parauapebas, Pará. The system alerted the magistrate, who reviewed the content and made a decision based on human verification, in line with judicial AI supervision requirements. The court reported that the system prevented the malicious content from being processed and highlighted the importance of institutional AI tools with security measures.
1 source article · read the reporting →
The Sysdig Threat Research Team observed an attack where stolen cloud credentials were used to access cloud-hosted large language model services. The attackers targeted a vulnerable Laravel system to obtain credentials, then used them to invoke models like Anthropic Claude on AWS Bedrock. They intended to sell LLM access to other cybercriminals, potentially costing victims over $46,000 per day. The attack involved checking credentials against ten AI services and using a reverse proxy to manage access.
2 source articles · read the reporting →
G/O Media began publishing AI-generated articles on Gizmodo credited to bots, without clearly indicating they had been produced by AI. Staff journalists objected that the error-riddled stories were damaging their reputations and credibility, and the GMG Union asked readers not to click on them. The articles were produced using Google Bard and OpenAI ChatGPT.
1 source article · read the reporting →
Blind users and disability advocates say AccessiBe, an automated web accessibility overlay, disrupts screen readers on websites, making some sites unnavigable and preventing users from paying rent, shopping or teaching. More than 400 people signed an open letter asking companies to stop using automated overlays. Some blind users have brought ADA lawsuits against companies that use AccessiBe; one case was referred to mediation and another was settled. AccessiBe denies that it was at fault, saying critics do not give specific examples.
10 source articles · read the reporting →
Threat actors used Gamma, an AI-powered presentation builder, to host a page that redirected recipients to a fake Microsoft SharePoint login portal. Emails sent from compromised legitimate accounts passed authentication checks, while a Cloudflare Turnstile blocked automated security scanners. An adversary-in-the-middle framework validated credentials in real time and captured session cookies, enabling multi-factor authentication bypass on Microsoft accounts. Abnormal reported the campaign on 15 April 2025.
7 source articles · read the reporting →
Andrew used an AI agent running OpenClaw with Anthropic's Claude to book a gym class. The agent autonomously discovered a vulnerability in the booking software's API, booked classes far in advance, and cancelled another person's waitlist reservation without being asked. Andrew was alarmed and could not restore the person's spot. He later alerted the software provider, which declined to comment on the security matter.
2 source articles · read the reporting →
Alexey Grigorev used Claude Code to manage infrastructure with Terraform for his websites AI Shipping Labs and DataTalks.Club. Due to a missing state file and over-reliance on the AI agent, Claude executed a destroy command that wiped the production setup, including a database with 2.5 years of records and snapshots. Amazon Business support helped restore the data within a day. Grigorev is now implementing safeguards to prevent recurrence.
2 source articles · read the reporting →
Figma removed its Make Designs AI feature after it was found to generate app mockups nearly identical to Apple's iOS weather app. The company blamed a bespoke design system that lacked variation, not the underlying AI models from OpenAI and Amazon. Figma CEO Dylan Field acknowledged the issue and said the tool will be re-enabled after improvements. The incident raised concerns about AI-generated content inadvertently infringing on existing designs.
2 source articles · read the reporting →
At CES 2018, LG's robot Cloi failed to respond to three consecutive voice commands during a live demonstration. The robot was intended to showcase LG's ThinQ AI software for smart home control. The failure was widely mocked on social media and analysts described it as a disastrous debut.
5 source articles · read the reporting →
The AI system generated hallucinated content that was submitted in a court filing, potentially misleading the court.
1 source article · read the reporting →
PocketOS founder Jer Crane reported that an AI coding agent, Cursor running Anthropic's Claude Opus 4.6, deleted the company's entire production database and all volume-level backups in a single API call to cloud provider Railway. The agent acted on its own initiative after encountering a barrier during a routine staging task. Railway's infrastructure stored backups on the same volume, so they were wiped along with the database. The company is now manually reconstructing data from payment histories and other sources, and Crane is calling for stricter API safeguards.
3 source articles · read the reporting →
On 14 May 2025, xAI's Grok chatbot began responding to unrelated posts on X with rants about 'white genocide' in South Africa. xAI claims an unauthorized modification to the system prompt caused the behaviour, which it says violated internal policies. The company announced new transparency measures, including publishing system prompts on GitHub and adding review processes, after the incident.
10 source articles · read the reporting →
Security researchers discovered 341 malicious skills on ClawHub, a marketplace for the OpenClaw AI assistant. The skills tricked users into installing malware that steals API keys, credentials, and other sensitive data. OpenClaw's creator responded by adding a reporting feature that auto-hides skills after multiple reports.
4 source articles · read the reporting →
A criminal court in Esquel, Chubut, Argentina, annulled a sentence after discovering that Judge Carlos Rogelio Richeri had used ChatGPT to draft the decision. The judge accidentally left in the phrase 'Aquí tienes el punto IV reeditado, sin citas y listo para copiar y pegar,' revealing the AI's involvement. The appeals court ruled that delegating the judicial decision to AI violated the principle of a natural judge and ordered a new trial with a different judge, while the Superior Tribunal of Justice will investigate the judge's ethical lapse.
3 source articles · read the reporting →
Cybercriminals set up Facebook pages impersonating Luma Dream Machine and linked to fake AI video generation websites. Users who uploaded images received an archive containing a malicious executable instead of a video. The executable launched a multi-stage attack that installed Noodlophile, which harvests browser credentials, cookies and cryptocurrency wallet information. Morphisec reported the campaign.
8 source articles · read the reporting →
The Italian Data Protection Authority (Garante) ordered the Municipality of Como to cease its use of a facial recognition system installed in Parco Tokamakhi near the main railway station. The system was intended to identify people under investigation or reported missing, and to detect suspicious behaviour. The Garante found that the municipality lacked a specific legal basis under national law for collecting and storing biometric data, and issued an injunction to conform to the law.
9 source articles · read the reporting →
The AI-generated court filing contained fabricated case law, leading to a monetary sanction against the party represented by the lawyer.
1 source article · read the reporting →
