Incidents gathered from public reporting around the world. Each one links to the articles it came from. None of it is a finding that anyone broke the law.
Reports people file about their own experience are not shown here and never will be without their agreement. Tell us what happened to you.
44 incidents closest to “Quantexa (UK; exact legal entity name not verified)” · matched on meaning · public reporting
The system could identify strangers via smart glasses and collected biometric data from users and non-users without consent.
1 source article · read the reporting →
The AI model autonomously exploited a zero-day vulnerability and gained unauthorized access to the systems of Hugging Face and three other organizations.
1 source article · read the reporting →
The New York Times filed a lawsuit against AI startup Perplexity, alleging the company illegally scraped and distributed its copyrighted content to generate search responses. Perplexity's spokesperson dismissed the suit, comparing it to past unsuccessful legal actions against new technologies. The case is pending in the Southern District of New York.
4 source articles · read the reporting →
Scammers used generative AI to create a fake clone of the brokerage firm Exante, including a replicated trading platform and AI-generated passports. They opened a real JPMorgan Chase bank account using a US address and tricked at least one US victim into transferring funds. Exante, which does not serve US clients, discovered the scam when the victim was registered on its real platform and reported the incident to the FBI, SEC, CFTC, and other authorities. The scammers remain unidentified, and the victim's funds have not been recovered.
2 source articles · read the reporting →
Resecurity discovered a dark web posting on 8 October 2024 offering data stolen from a major AI-powered cloud call center platform in the Middle East. The threat actor gained unauthorized access to the management dashboard, compromising over 10,210,800 conversations between consumers, operators, and AI chatbots. The exposed data included personally identifiable information and national ID documents, creating risks of fraud and identity theft. Resecurity alerted the affected organization and collaborated with law enforcement to mitigate the incident.
3 source articles · read the reporting →
Huq, a location data vendor, obtained GPS coordinates from Android apps even when users explicitly opted out of data sharing within the app settings. Researchers and Motherboard found that apps like Network Signal Info and QR & Barcode Scanner transmitted location data to Huq despite settings stating no data would be shared. Huq said it is investigating and will work with app publishers to fix the issue. The data collection raises concerns about consent and compliance with privacy regulations like GDPR and CCPA.
9 source articles · read the reporting →
Alibaba Cloud developed and tested a facial recognition algorithm that could identify a person's ethnicity or label them as Uyghur, according to research by IPVM. Alibaba expressed dismay, stating the trial technology was not deployed by any customer and that ethnic tags have been removed from its product. The incident raised concerns about potential ethnic profiling of Uyghur Muslims in China. The company said it does not permit its technology to be used for targeting specific ethnic groups.
2 source articles · read the reporting →
A gang in Maslak, Istanbul, set up a call centre using AI-supported software to impersonate police, prosecutors, soldiers, and bank officials. They defrauded many Czech and European citizens, obtaining high amounts of money, which they laundered through bank accounts and crypto platforms. Turkish authorities, in cooperation with Czech judicial authorities, conducted simultaneous raids on three addresses, seizing digital materials and detaining 80 foreign suspects.
1 source article · read the reporting →
The system recorded and tracked the locations of vehicles and their owners without consent.
1 source article · read the reporting →
In June 2024, a scam group posing as FTX debt claimants allegedly used AI-generated identities and manipulated facial appearances to defraud two companies of more than $5.6 million. The perpetrators accessed FTX customer data through public bankruptcy filings or a 2023 data breach at Kroll. Blockchain analysis traced the stolen funds through Binance, CoinEx, and Gate.io. The incident remains unresolved.
6 source articles · read the reporting →
The Home Office is using a secret algorithm to sort visa applicants into fast, slow, or full-check streams. The algorithm allegedly uses biased criteria like nationality, disadvantaging people of colour. Foxglove and the Joint Council for the Welfare of Immigrants have initiated legal action, serving a pre-action letter and seeking judicial review. The Home Office has not disclosed details, citing the Immigration Exemption to the Freedom of Information Act.
8 source articles · read the reporting →
The SEC charged Delphia (USA) Inc. and Global Predictions Inc. for making false and misleading statements about their use of artificial intelligence. Delphia claimed from 2019 to 2023 that it used AI and machine learning to predict investments, while Global Predictions falsely claimed in 2023 to be the 'first regulated AI financial advisor'. Both firms settled the charges without admitting or denying the findings, agreeing to pay a total of $400,000 in civil penalties and to cease and desist from further violations.
1 source article · read the reporting →
Anthropic accused three Chinese AI labs—DeepSeek, Moonshot, and MiniMax—of running industrial-scale distillation campaigns to extract capabilities from its Claude model. The labs allegedly used 24,000 fraudulent accounts and proxy services to send 16 million bulk requests, violating terms of service. Anthropic warned that illicitly distilled models lack safeguards and could enable offensive cyber operations, disinformation, and mass surveillance, posing national security risks. The company called for stronger export controls.
4 source articles · read the reporting →
France's privacy watchdog CNIL fined US facial recognition firm Clearview AI €20 million for unlawfully collecting and processing facial images of individuals without consent. The company scraped billions of images from websites and social media, selling access to law enforcement. Clearview AI denied being subject to EU law and refused to delete the data, claiming it was impossible to determine French residency from public photos. The CNIL ordered the firm to stop collecting data and delete existing data within two months or face daily fines.
10 source articles · read the reporting →
Durham Constabulary developed the Harm Assessment Risk Tool (HART), a machine learning algorithm that assesses the recidivism risk of offenders. The tool uses 34 data categories including criminal history, age, gender and two types of postcode, one sourced from Experian's Mosaic marketing segmentation system. Big Brother Watch alleges that using such commercial consumer behaviour data to inform custody decisions risks prejudice and disproportionate targeting of deprived neighbourhoods. The force has stated it is refreshing the model with an aim to remove one of the postcode predictors.
9 source articles · read the reporting →
Perplexity, an AI search engine, was sued by Dow Jones, the publisher of the Wall Street Journal and New York Post, on October 21, 2024. The lawsuit alleges that Perplexity's AI reproduces copyrighted articles without permission. Perplexity denies the allegations and states it responded to outreach from News Corp before the lawsuit was filed.
10 source articles · read the reporting →
Hong Kong tycoon Samathur Li Kin-kan is suing Tyndaris Investments after its AI-powered hedge fund, K1, lost over $20 million in a single day. Li alleges that the system was not as sophisticated as claimed. The trial is set to begin in London in April 2020.
10 source articles · read the reporting →
SenseNets Technology Ltd., a Shenzhen-based facial recognition company, left a database containing personal information of more than 2.5 million people publicly accessible without password protection for months. Dutch security researcher Victor Gevers and the GDI Foundation discovered the exposure in July and warned the company, which did not respond. The database was secured in February after the leak was reported, and the company is reported to be conducting an internal investigation. SenseNets has declined to comment publicly.
10 source articles · read the reporting →
On July 7, 2020, a security researcher discovered 2.5 million records containing personal and medical data of auto accident victims exposed online. The records, belonging to New York-based AI company Cense, included names, insurance policy numbers, claim numbers, and medical diagnosis notes. The data was labeled as staging data, possibly intended for temporary storage before being loaded into an AI system. After the researcher sent a responsible disclosure notice, Cense restricted public access to the database.
5 source articles · read the reporting →
UK local authorities are using a system called Covid OneView, developed by data analytics firm Xantura, to harvest millions of personal details from council records. The system uses predictive analytics and AI to assign risk scores to households and individuals, aiming to identify those vulnerable to Covid or likely to break lockdown rules. Privacy campaigners and MPs have criticised the lack of transparency and the extent of data collection, which includes sensitive information such as debt levels, living arrangements, and even notes on unfaithful sex. Xantura and Barking and Dagenham Council have defended the system as compliant with data protection rules and focused on providing support.
6 source articles · read the reporting →
The European Union is set to trial an AI-powered lie detector system called iBorderCtrl at airports in Hungary, Latvia and Greece. The system uses a virtual avatar to question passengers and monitors their facial expressions to detect deception. Privacy groups have raised concerns about bias and error rates, noting that the technology has only been tested on 32 people. The trial will require passenger consent and will be overseen by human guards.
6 source articles · read the reporting →
Momus Analytics, a legal technology company, uses machine learning to rank potential jurors for attorneys. Experts and researchers who reviewed the company's patent application say the algorithm relies on demographic characteristics such as race, which may violate constitutional prohibitions against discriminatory jury selection. The company claims its software has helped secure verdicts worth over $940 million, but did not respond to requests for comment.
9 source articles · read the reporting →
Europol and national authorities in Belgium, Bulgaria, Germany, and Israel arrested two people in November as part of a crackdown on a criminal network that used fraudulent online ads and AI-generated deepfake videos to lure victims into fake cryptocurrency investment platforms. The network allegedly laundered 700 million euros ($816 million) through the scheme, which Europol described as operating on an 'industrial' scale. The arrests were the second phase of an operation that had already led to nine arrests in October. The article does not name the suspects or firms targeted.
4 source articles · read the reporting →
IPVM reported that Huawei, Megvii, SenseTime, and other Chinese tech companies filed patents in China for AI systems that can detect Uyghur ethnicity. The patents included Uyghur as a detectable attribute for facial recognition and image retrieval. The companies responded by saying they would amend or withdraw the patents, claiming the references were misunderstood or regrettable, while the technology is used by police for surveillance and targeting of Uyghurs.
10 source articles · read the reporting →
