| Suno: Breach exposes personal data of 55 million AI music platform users |
2025-11-15 |
Technology |
High
|
Suno |
United States |
— |
— |
| Anthropic: State-sponsored group jailbreaks Claude Code for cyber espionage |
2025-11-13 |
Other |
Critical
|
Anthropic (Claude Code) |
United States |
— |
Claude |
| ServiceNow: ‘BodySnatcher’ flaw in Now Assist AI Agents could let attackers impersonate any user |
2025-10-30 |
Technology |
Low
|
ServiceNow |
United States |
— |
— |
| Baltimore County Public Schools: AI gun-detection system mistakes Doritos bag for firearm, student handcuffed |
2025-10-24 |
Education |
Medium
|
Baltimore County Public Schools |
United States |
— |
— |
| Google: Conservative activist sues over AI chatbot’s false child sex abuse and assassination-related claims |
2025-10-22 |
Technology |
High
|
Google |
United States |
Bard, Gemma |
Google |
| Deloitte: Refunds Australian Government After AI-Fabricated Citations Found in $440,000 Report |
2025-10-21 |
Consulting & Professional Services |
Medium
|
Deloitte |
Australia |
— |
— |
| NTB: Norwegian news agency retracts AI-fabricated quotes and nonexistent director in Telenor story |
2025-10-15 |
Media & Entertainment |
Low
|
NTB, Telenor |
Norway |
— |
— |
| Zoetis: AI diagnostic tool misclassifies cancerous tumor as benign, veterinary hospital says dog died as a result |
2025-10-15 |
Healthcare |
High
|
Zoetis |
United States |
— |
— |
| Google: Lawsuit alleges Gemini chatbot drove Florida man to suicide |
2025-10-02 |
Technology |
Critical
|
Google |
United States |
— |
Gemini |
| Google: Family sues Alphabet alleging Gemini chatbot helped drive Florida man to suicide |
2025-10-01 |
Technology |
Critical
|
Google (Alphabet) |
United States |
Gemini 2.5 Pro |
Gemini |
| Multiple developers: Malicious ‘postmark-mcp’ npm package secretly BCCs emails to attacker-controlled domain |
2025-09-17 |
Technology |
Medium
|
Multiple developers (fake 'postmark-mcp' npm package impersonating Postmark) |
— |
— |
— |
| Mendones v. Cushman & Wakefield: California court dismisses lawsuit after plaintiffs submit AI deepfake video as evidence |
2025-09-09 |
Other |
High
|
Mendones |
United States |
— |
— |
| Salesforce: Agentforce prompt injection flaw could exfiltrate CRM data |
2025-09-01 |
Technology |
Low
|
Salesforce |
United States |
— |
Salesforce |
| Imagime Interactive: Chattee Chat and GiMe Chat AI companion apps expose 43 million messages |
2025-08-28 |
Technology |
High
|
Imagime Interactive Limited |
Hong Kong |
— |
— |
| Perplexity: Comet AI browser prompt injection exposes user accounts to takeover |
2025-08-20 |
Technology |
Medium
|
Perplexity |
United States |
— |
— |
| Salesloft: Stolen OAuth tokens from Drift AI chatbot integration compromise 700+ organizations |
2025-08-08 |
Technology |
Critical
|
Salesloft |
United States |
— |
— |
| Lawrence Public Schools: Students sue Kansas district over Gaggle AI surveillance tool |
2025-08-01 |
Education |
Medium
|
Lawrence Public Schools |
United States |
— |
— |
| Figueroa Tank Lines, Samsara: AI workplace-monitoring alert leads to trucker’s firing, sparks vendor-liability lawsuit |
2025-08-01 |
Transportation & Logistics |
Medium
|
Figueroa Tank Lines, Samsara |
United States |
— |
— |
| Google: Gemini CLI coding agent deletes user’s files during botched move operation |
2025-07-25 |
Technology |
Medium
|
Google |
United States |
— |
Gemini |
| SaaStr: Replit AI agent deletes production database during code freeze |
2025-07-18 |
Technology |
High
|
SaaStr |
United States |
— |
— |
| Fargo/West Fargo Police: Facial recognition error jails Tennessee grandmother for five months over a North Dakota fraud case |
2025-07-15 |
Government & Public Sector |
High
|
West Fargo Police Department |
United States |
— |
— |
| CISA: Acting director uploaded sensitive government contracting files to public ChatGPT |
2025-07-15 |
Government & Public Sector |
High
|
CISA |
United States |
— |
OpenAI |
| AdventHealth Shawnee Mission: Hospital sues Blue KC over AI-driven denial of $2 million in medical claims |
2025-07-14 |
Healthcare |
High
|
AdventHealth Shawnee Mission, Blue KC |
United States |
— |
— |
| mcp-remote: Critical RCE vulnerability (CVE-2025-6514) exposes AI coding clients to full system compromise |
2025-07-09 |
Technology |
Low
|
mcp-remote (open-source project) |
— |
— |
— |
| xAI: Grok chatbot generates antisemitic Hitler-praising posts after botched code update |
2025-07-08 |
Technology |
High
|
xAI |
United States |
— |
Grok |