Minnesota Attorney Reportedly Used AI-Generated Fabricated Citations in Hennepin County Civil Case and Agreed to 30-Day Suspension

Minnesota attorney Faisal S. Ahmed reportedly filed a 2025 legal memorandum containing AI-generated legal authorities that included invented cases and an inaccurate quotation from an actual decision. The errors reportedly burdened opposing counsel and the Hennepin County District Court, which later fined Ahmed $5,000. He subsequently agreed to a 30-day suspension of his law license and $900 in costs.

Risk classification

• Primary risk domain: 3 Misinformation
• Primary risk subdomain: 3.1 False or misleading information

The AI system generated fabricated legal and academic citations, which constitutes false or misleading information that misled users and the court.

Additional risk subdomains

• 5.1 Overreliance and unsafe use: The attorney relied on the AI's output with blind faith, failing to verify the citations before submitting them to the court.

Causal factors

• Entity: AI
• Intent: Unintentional
• Timing: Post-deployment

The incident was caused by the AI system hallucinating fake citations, which was an unexpected and unintentional outcome of using the tool to draft a brief.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The system is a general-purpose chatbot (ChatGPT) used for text generation, which falls under Limited Risk and is subject to transparency obligations.

AI system and alleged parties

• AI system: ChatGPT
• AI purpose: Writing Assistant; Technical Text Generation
• Behaviour type: Assistant
• Alleged developer: Large language model developers
• Alleged deployer: Lawyers, Faisal S. Ahmed
• Alleged harmed parties: Judicial integrity, Hennepin County District Court, George Warner Jr., Faisal S. Ahmed, Epistemic integrity

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Minor, indirect Minor
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Epistemic

Reported: The report explicitly describes epistemic harm through the fabrication of legal and academic citations.

Directly caused: The AI fabricated nonexistent legal cases ('Anderson v. City of Biwabik') and academic paper citations, corrupting the legal and academic record.

Indirectly caused: The court was presented with false legal precedents, and a federal court had to toss out researcher testimony due to fake citations.

Inferred additional harm: The integrity of the legal system is threatened by the widespread use of AI to generate fake law across over 800 documented instances.

People affected

• Occurrences reported: 3
• People reportedly harmed: 5
• People reportedly exposed: 10

Potential causes

Management

• Poor Quality Control: Lack of oversight and verification procedures within the legal practice.

Technology

• AI Citation Hallucination: AI tools generate realistic but completely fabricated legal cases and quotes.
• Lack of Fact Verification: The AI model lacks real-time verification against official legal databases.

Data Inputs

• Probabilistic Training Data: The model predicts words based on patterns rather than retrieving true facts.

Human Factors

• Blind Faith in AI Outputs: The attorney accepted the AI-generated brief without verifying the citations.
• Neglect of Ethical Duties: Failure to maintain competence and candor toward the court during filing.

Process and Methods

• No Manual Cross-Checking: Skipping the critical step of searching for cases in official legal indexes.
• Substituting AI for Analysis: Using AI tools as a shortcut instead of conducting thorough legal research.

Regulatory Environment

• Underenforced AI Guidelines: Ethical rules exist but are often violated before detection by the courts.

Information quality

• Classification confidence: High
• Reason for confidence: The report provides clear, factual details about the specific legal cases, the names of the individuals involved, the exact fake citations generated, and the specific disciplinary actions taken. The role of the AI (hallucinating citations) is explicitly stated.

An attorney submitted AI-generated fake case citations in a Minnesota court, resulting in a fine and suspension. While part of a growing trend of over 800 similar incidents disrupting judicial efficiency, the national security impact remains minor, as it is contained within standard legal disciplinary frameworks.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Ahmed

Threat characteristics

• Imminence: Long-term. Represents an ongoing, systemic challenge of AI overreliance in professional settings rather than an active, imminent national security crisis.
• Autonomy: Human-controlled. The AI acted as a writing assistant to generate text, but final submission and verification decisions remained entirely under the control of the human attorney.
• Novelty: Established threat. With over 800 documented instances of AI-generated fake citations in legal proceedings, this represents an established and recurring threat type.

Impact by dimension

• Physical security: Negligible. No physical threat, kinetic attacks, or critical infrastructure disruption occurred.
• Information security: Negligible. No significant intelligence compromise or coordinated information warfare operations were indicated in the incident reports.
• Sovereignty: Minor. The generation of fake legal precedents disrupted court proceedings and judicial administration, representing a minor impact manageable within standard legal disciplinary procedures.
• Economic security: Negligible. Financial impact was limited to individual legal fines and minor court inefficiencies, with no threat to strategic industries or national economic stability.
• Societal stability: Negligible. No mass surveillance, systemic discrimination, or threat to civil liberties occurred; the incident was confined to localized legal proceedings.