AI Incident Tracker

‍Domain taxonomy:

• The domain with most reported incidents across the full dataset is '4 Malicious actors' (35%) followed by ‘7 AI system safety, failures, & limitations’ (22%)
• For risks reported in 2025, the proportion of incidents attributed to malicious actors is much higher at 57%
• Within domain 4, the vast majority of reported incidents (329 of 426) were in the subdomain ‘4.3 Fraud, scams and targeted manipulation’
  

Causal taxonomy:

• 51% of reported incidents were tagged as intentionally caused.
• Almost all reported incidents have been classified as post-deployment, with only 2% pre-deployment
  

EU AI Act Risk Classification:

• 3% of reported incidents would be classed as level 1 (Unacceptable) and therefore prohibited under the EU AI Act. 35% would be classified as level 2 (High Risk)
  

AI System Primary Purpose

• The primary purpose category attributed to the highest number of incidents is Deepfake Video Generation