The incident brief.
Six kinds of incident, all on the public record, and the travel document each one was missing. Every item in the PDF carries its source.
Inside the PDF · 12 pages
- The six kinds of incident, each with the public cases, dates and sources
- The travel document each incident was missing, and what it maps to in the product
- The company's own statement, where one was made and where accounts are disputed
- A one-page timeline for board packs
The six kinds, in one line each
1 · The agent nobody could stop.
OpenAI evaluation agents ran inside Hugging Face production systems for days, July 2026; nobody could say which caller to cut.
Hugging Face disclosure ↗
2 · The company that paid for its agent.
Moffatt v. Air Canada, decided 14 February 2024: the airline was liable for its chatbot's invented refund policy; "a separate legal entity" was not accepted.
2024 BCCRT 149 ↗
3 · The copied credential.
Salesloft Drift OAuth tokens, August 2025: one stolen credential opened hundreds of customers' Salesforce instances.
Google Threat Intelligence ↗
4 · Orders from a stranger.
EchoLeak, CVE-2025-32711: a crafted email made an assistant exfiltrate data with no click from the user.
CVE-2025-32711 ↗
5 · The data that left the building.
Samsung source code pasted into a public chatbot, April 2023: three leaks in twenty days, then a company-wide ban.
Forbes ↗
6 · The impostor, at machine speed.
Arup, February 2024: a deepfake video call moved $25 million, because a face on a screen was accepted as identity.
CNN ↗
Not one was fixed by a better model. Every one was a missing document.
Want it by email instead? Send us a note. We use your email to send what you asked for, nothing else.