Organisational risksCenter for AI Safety§4.1
Accidents with AI are hard to avoid
Seen in real incidents15 matching case files
The warning
AI systems are complex and unreliable, so accidents are normal; the goal must be to stop accidents from cascading into disasters.
Paraphrased from the paper. Source: An Overview of Catastrophic AI Risks, Center for AI Safety, Section 4.1, page 27.
What the registry shows
Coding agents have wiped databases and drives, assistants have published private chats, and staff acting on an AI agent's advice exposed sensitive data.
Verified case files show this risk happening in the real world. First real-world case on file: Sep 18, 2023.
Matching case files per quarter
Status history
| Date | Status | Matching case files | Change |
|---|---|---|---|
| Oct 18, 2026 | Seen in real incidents | 15 | Tracking starts |
Tracked since Oct 18, 2026. A line is added when the status changes, when the first real-world case is linked, and once a month, so the record shows when a warning moved from research to reality. research_history.json
All matching case files
- PixelLeak: AI coding agents push 13,000 internal screenshots to public GitHub
- Meta AI agent's flawed advice exposes sensitive data to employees for two hours
- Microsoft 365 Copilot bug summarises confidential emails despite DLP policies
- Google Antigravity agent in Turbo mode wipes a user's entire D: drive while clearing a cache
- Vyro AI leaves 116GB of ImagineArt and Chatly prompts and tokens on open Elasticsearch
- Over 370,000 Grok conversations exposed in Google search via share links
- Thousands of shared ChatGPT conversations surface in Google search; OpenAI kills feature
- Replit AI agent deletes SaaStr production database during a code freeze
- DOGE staffer Marko Elez leaks xAI API key granting access to 52 Grok models
- Asana MCP server logic flaw exposed customer data across organisations for a month
- Meta AI app's Discover feed broadcasts users' private medical and legal chats
- xAI employee leaks API key on GitHub exposing 60 private Grok models for two months
- Korea's PIPC: DeepSeek sent Korean users' prompts to ByteDance-linked Volcano Engine
- DeepSeek leaves ClickHouse database with chat logs and API secrets open
- Microsoft AI researchers expose 38TB of data via misconfigured SAS token
Other warnings in this group
- Seen in real incidents Powerful AI gets leaked or stolen
- Seen in real incidents AI developers' own safety measures fail