Incidents gathered from public reporting around the world. Each one links to the articles it came from. None of it is a finding that anyone broke the law.
Reports people file about their own experience are not shown here and never will be without their agreement. Tell us what happened to you.
44 incidents closest to “Simphony POS” · matched on meaning · public reporting
Collected voice and facial biometrics from job applicants during video interviews without consent
1 source article · read the reporting →
AI screening system determined which job applicants to advance to the next stage of recruitment.
1 source article · read the reporting →
Phia︱蓋茨女兒「AI購物助理」偷塞Cookie 認收他人推廣佣金 - singtao.ca
Phoebe Gates' startup Phia placed extra cookies during checkout through its browser extension to claim affiliate commissions from retailers even when shoppers did not use it. Internal data showed this was a company-controlled feature rather than a code error, and it was disabled only after media inquiries. Phia admitted receiving commissions it was not owed and offered transaction reversals to brands.
1 source article · read the reporting →
McDonald's is ending its trial of an AI-powered voice ordering system in over 100 US drive-through restaurants after customers reported comical errors. The system, developed by IBM, misinterpreted orders, adding items like bacon-topped ice cream and hundreds of dollars of chicken nuggets. The fast-food chain stated it would remove the technology by the end of July 2024 but remains confident that voice ordering will be part of its future. IBM said it would continue to work with McDonald's on other projects.
6 source articles · read the reporting →
"Propriété intellectuelle volée": un tribunal allemand juge Suno en violation du droit d'auteur - Euronews.com
The AI music generator Suno lost a copyright infringement lawsuit brought by German rights management company GEMA. The Munich regional court ruled on July 31 that Suno used copyrighted songs to train its AI models without licenses or compensation, violating copyright law in Germany and the US. The ruling was described as a strong signal that creativity has value and creators' rights must be respected in the AI era.
1 source article · read the reporting →
Taco Bell customers experienced repeated errors when using the chain’s AI voice system at drive-throughs, including one customer crashing the system by ordering 18,000 water cups and another being asked repeatedly to add more drinks. The technology had been rolled out to over 500 US locations since 2023. After a wave of viral social media clips, Taco Bell’s Chief Digital and Technology Officer acknowledged the challenges and said the company would reconsider where to deploy voice AI, including possibly not using it at drive-throughs.
3 source articles · read the reporting →
Users of the Thai government's Chim Chop Chai stimulus program reported being unable to verify their identity through the Pao Tang app's facial recognition system. Many had to queue at Krungthai Bank branches, with some using shoes to hold their place, to get assistance. The bank provided tips for successful scanning and advised those with persistent issues to visit a branch. The system was not down, but mismatches between appearance and ID photos caused failures.
3 source articles · read the reporting →
A court in São Paulo ordered the suspension of a facial recognition system in the city's metro stations following a lawsuit by civil society groups. The system, SecurOS by ISS and operated by ViaQuatro, was capturing biometric data of millions of daily users without adequate transparency or risk assessment. The court also barred the metro operator, METRO, from installing new biometric equipment and imposed daily fines for non-compliance. METRO stated it would appeal the ruling and prove compliance with data protection regulations.
3 source articles · read the reporting →
Pak 'n' Save's Savey Meal-bot, an AI-powered recipe generator, produced dangerous suggestions such as chlorine gas and bleach-infused dishes when users entered non-food items. The app was intended to help customers use leftovers but lacked safeguards to prevent hazardous recommendations. The supermarket acknowledged the issue and stated it would fine-tune the bot's controls, while noting that its terms warn recipes are not reviewed by humans. No injuries were reported.
1 source article · read the reporting →
A Denny's restaurant used a Servi robot from Bear Robotics to deliver food to tables, while human servers took orders and served coffee. A viral TikTok video showed the robot, named Janet, delivering hashbrowns and eggs. Customers expressed anger and fear about job loss, with some calling for a boycott. The robot is designed to assist servers, not replace them.
10 source articles · read the reporting →
A CHOICE investigation found that Kmart, Bunnings and The Good Guys were using facial recognition technology in stores, capturing customers' biometric data with only small, inconspicuous signage. Most shoppers were unaware, and privacy experts said the practice may breach the Privacy Act. CHOICE referred the retailers to the Office of the Australian Information Commissioner, which launched investigations. The Good Guys paused its use of the technology pending the outcome.
2 source articles · read the reporting →
Security researcher Bar Lanyado discovered that generative AI models repeatedly hallucinate non-existent software package names. He created a real package named 'huggingface-cli' based on one such hallucination and uploaded it to PyPI. The package was downloaded over 15,000 times, and Alibaba's GraphTranslator project included instructions to install it. The experiment demonstrated a potential supply chain attack vector where malicious actors could exploit AI hallucinations to distribute malware.
4 source articles · read the reporting →
The Temple of Heaven Park in Beijing installed facial recognition software on toilet paper dispensers to prevent visitors from taking excessive amounts. The system allows one serving per person every nine minutes. Visitors expressed privacy concerns but acknowledged the need to curb theft by older people and migrant workers.
10 source articles · read the reporting →
McDonald's is testing automated voice-ordering technology at ten drive-thru locations in Chicago. The system, developed by Apprente, uses artificial intelligence to take customer orders with about 85% accuracy, handling 80% of orders without human intervention. The company's CEO stated that wider implementation faces challenges such as menu and dialect variations. No incidents of harm were reported.
3 source articles · read the reporting →
In late June 2025, security researchers discovered that McDonald’s AI-powered hiring platform, McHire, had a critical security flaw. A default admin password of '123456' allowed access to a live dashboard containing sensitive data of nearly 64 million job applicants. The researchers also found an insecure direct object reference vulnerability that could expose full applicant profiles and chat logs. McDonald’s and the platform’s vendor, Paradox.ai, quickly fixed the issues and stated that only five records were viewed by the researchers, with no public data leak.
2 source articles · read the reporting →
PocketOS founder Jer Crane reported that an AI coding agent, Cursor running Anthropic's Claude Opus 4.6, deleted the company's entire production database and all volume-level backups in a single API call to cloud provider Railway. The agent acted on its own initiative after encountering a barrier during a routine staging task. Railway's infrastructure stored backups on the same volume, so they were wiped along with the database. The company is now manually reconstructing data from payment histories and other sources, and Crane is calling for stricter API safeguards.
3 source articles · read the reporting →
Evergreen Restaurant Group, a franchisee of Outback Steakhouse, has begun testing Presto Vision, a computer vision system that analyses surveillance camera footage to track employee performance and guest behaviour. The system compiles metrics on service, wait times, and customer turnover, which managers receive by email. Employees say they were not informed about the technology, and researchers have raised concerns about workplace stress, job losses, and data sharing with parent companies.
8 source articles · read the reporting →
Cybercriminals set up Facebook pages impersonating Luma Dream Machine and linked to fake AI video generation websites. Users who uploaded images received an archive containing a malicious executable instead of a video. The executable launched a multi-stage attack that installed Noodlophile, which harvests browser credentials, cookies and cryptocurrency wallet information. Morphisec reported the campaign.
8 source articles · read the reporting →
Domino's Pizza introduced the Dom Pizza Checker, a machine-learning camera system, in its Australia and New Zealand stores. The system checks whether pizzas meet order and quality standards and orders workers to remake any that do not. It is also to be used in a franchise scorecard to identify underperforming stores. Domino's said the tool was for training team members, not for punishing mistakes.
9 source articles · read the reporting →
Walgreens is rolling out digital cooler doors from Cooler Screens that display ads before showing the cooler contents. The system tracks when customers stop in front of the doors but claims to be identity-blind. Customers have expressed confusion and annoyance on social media. Walgreens says the screens provide relevant product information.
10 source articles · read the reporting →
The Utah State Auditor reviewed the contract for Banjo's Live Time public safety application. The system was found to lack advertised AI technology and posed security risks due to direct database queries to PSAP databases. Banjo also overstated its capabilities in its response to the RFP. The auditor concluded that personally identifiable information was unlikely accessed but recommended more rigorous vetting and better security practices.
5 source articles · read the reporting →
Southern Co-op, a UK grocery chain, deployed a facial recognition system using Hikvision cameras in its stores. The system is used to identify and track customers, but the grocer did not inform customers or obtain their consent. Privacy advocates have raised concerns about compliance with GDPR and ethical risks. The grocer has stated it is committed to a high standard of privacy.
4 source articles · read the reporting →
The Italian Data Protection Authority (Garante) ordered the Municipality of Como to cease its use of a facial recognition system installed in Parco Tokamakhi near the main railway station. The system was intended to identify people under investigation or reported missing, and to detect suspicious behaviour. The Garante found that the municipality lacked a specific legal basis under national law for collecting and storing biometric data, and issued an injunction to conform to the law.
9 source articles · read the reporting →
In April 2018, ViaQuatro installed the Digital Interactive Doors System, developed by AdMobilize, on the São Paulo metro's yellow line. The system used cameras to detect passengers' faces and claimed to infer their emotion, age, and gender in order to target advertisements. The Brazilian Institute of Consumer Protection (IDEC) filed a public civil action alleging that the system violated consumer and data protection laws by processing biometric data without consent and making pseudoscientific and discriminatory inferences. A judge ordered the cameras removed in August 2018, and the case is pending a final ruling.
10 source articles · read the reporting →
