Incident database
Structured records of AI agent security incidents: what happened, which vendor and agent type, the root cause, and every source we used. Filter, browse, or download as CSV.
| Incident date | Incident | Vendor | Agent | Root cause | Severity | Status |
|---|---|---|---|---|---|---|
| 1 Feb 2025 | Calendar invite hijacks Gemini to control smart home devices | workflow | prompt injection | resolved | ||
| 15 Jan 2025 | EchoLeak: zero-click prompt injection in Microsoft 365 Copilot | Microsoft | workflow | prompt injection | resolved | |
| 11 Nov 2022 | Air Canada held liable for refund policy invented by its chatbot | Air Canada | customer service | hallucinated action | resolved |