Error in Pepsi's Number Generation System Led to Decades-Long Damages in the Philippines

Pepsi's number generation system determining daily winners in its Number Fever promotion in the Philippines mistakenly produced a number held by thousands which resulted in riots, deaths, conspiracy theories, and decades of lawsuits.

Risk classification

• Primary risk domain: 7 AI system safety, failures, & limitations
• Primary risk subdomain: 7.3 Lack of capability or robustness

The computer system failed to perform reliably, suffering a glitch that generated 800,000 erroneous winning caps instead of the intended two.

Additional risk subdomains

• 3.1 False or misleading information: The system generated false winning numbers on 800,000 bottle caps, misleading hundreds of thousands of consumers into believing they had won a life-changing prize.

Causal factors

• Entity: AI
• Intent: Unintentional
• Timing: Post-deployment

The incident was caused by an unintentional computer glitch in the deployed number generation system.

EU AI Act risk tier

• Risk tier: 4 Minimal or No Risk

Minimal or No Risk: The system was a simple computer program used for a marketing promotion, which falls under entertainment/marketing applications posing low or negligible risk to society under the EU AI Act framework.

AI system and alleged parties

• AI purpose: Resource Allocation; Marketing Analytics Generation
• Behaviour type: Tool
• Alleged developer: D.G. Consultores
• Alleged deployer: Pepsi
• Alleged harmed parties: Filipinos

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Substantial
• Infrastructure: direct Negligible, indirect Minor
• Property: direct Negligible, indirect Substantial
• Financial: direct Negligible, indirect Substantial
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Minor
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Negligible, indirect Substantial
• Epistemic: direct Minor, indirect Minor
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Physical

Reported: The report explicitly describes physical harm, including multiple deaths and injuries, resulting from the riots and bombings.

Indirectly caused: A homemade grenade intended for a Pepsi truck killed a schoolteacher and a 5-year-old student, and wounded six others. Additionally, a protester's husband died of heart failure while marching.

Inferred additional harm: It is highly likely that other protesters, security personnel, or bystanders suffered physical injuries during the widespread riots and attacks on 32 to 37 trucks.

Infrastructure

Reported: The report explicitly describes damage to Pepsi's bottling plants and corporate offices.

Indirectly caused: Pepsi bottling plants and corporate offices were targeted with Molotov cocktails and makeshift explosives, requiring the erection of barbed wire.

Inferred additional harm: Minor damage to public roads and municipal infrastructure where riots and truck burnings occurred is highly likely.

Property

Reported: The report explicitly describes extensive property damage to Pepsi's delivery fleet and offices.

Indirectly caused: Between 32 and 37 Pepsi delivery trucks were overturned, burned, stoned, or vandalized, and corporate office windows were shattered by explosives.

Inferred additional harm: Collateral damage to nearby vehicles and buildings during the street riots and bombings is highly likely.

Financial

Reported: The report describes Pepsi's promotional budget ballooning from $2 million to $10 million, and consumers losing out on the promised 1 million pesos ($37,000 to $40,000) per winning cap.

Indirectly caused: Pepsi incurred $8 million in unexpected goodwill payouts and suffered a drop in market share from 26 percent to 17 percent. Average financial loss per occurrence is estimated at $8 million for Pepsi.

Inferred additional harm: Pepsi likely faced millions of dollars in additional legal fees defending 689 civil and 5,200 criminal complaints, alongside massive lost sales revenue.

Malicious content

Reported: The report describes the creation and distribution of anti-Pepsi tracts.

Indirectly caused: Protest groups like Coalition 349 printed and distributed anti-Pepsi tracts to organize product boycotts.

Psychological

Reported: The report describes severe anger, distress, and death threats resulting from the incident.

Indirectly caused: Tens of thousands of impoverished Filipinos experienced severe emotional distress and shattered hopes after being denied their life-changing prizes. Pepsi executives also faced constant death threats.

Inferred additional harm: Widespread trauma and anxiety likely affected communities surrounding the targeted bottling plants and riot zones.

Epistemic

Reported: The report describes epistemic harm in the form of fabricated winning caps and subsequent conspiracy theories.

Directly caused: The computer glitch generated 800,000 false winning caps, corrupting the truth of the sweepstakes results.

Indirectly caused: The incident spawned widespread conspiracy theories, including allegations of deliberate self-sabotage by Pepsi.

People affected

• Occurrences reported: 1
• People reportedly harmed: 486179
• People reportedly exposed: 800000

Potential causes

Management

• Poor Crisis Management: Offering a small goodwill gesture instead of taking full responsibility.
• Inadequate Risk Assessment: Management did not assess the potential for system-wide technical failures.

Technology

• Computer Glitch: A computer error instructed bottlers to print 800,000 winning caps.
• Lack of Security Code Check: Automated systems printed winning numbers without verifying security codes.

Data Inputs

• Incorrect Seeding Data: The computer-generated list seeded incorrect winning numbers to the bottler.

Human Factors

• Public Desperation and Poverty: Widespread poverty made the grand prize a life-changing sum for consumers.
• Consumer Disregard of Security Codes: Consumers demanded payouts based on the printed number alone.

Process and Methods

• Flawed Promotion Logic: No process existed to cross-verify printed caps against the intended winners.
• Inadequate Quality Control: Failure to inspect physical caps at the bottling plant prior to distribution.

Information quality

• Classification confidence: High
• Reason for confidence: The reports provide a highly detailed historical account of the 1992 Pepsi 349 incident, including specific numbers of affected people, casualties, financial impacts, and the nature of the computer error.
• Ambiguities identified: The exact technical specifications of the computer glitch are not detailed, but the operational outcome is clear.
• Alternative interpretations: The incident could be viewed purely as a corporate public relations disaster, but the central role of the computer glitch in generating the error makes it a clear system failure case.

A 1992 computer glitch in Pepsi's promotional campaign in the Philippines printed 800,000 winning caps instead of two, triggering widespread civil unrest, riots, bombings, and multiple deaths. While the technical failure was a simple database error, the real-world consequences highlighted how automated system failures can severely disrupt local societal stability.

• Overall national security impact: Substantial
• Scope: Single nation
• Primary target: Philippines
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. This is a historical incident from 1992 that has been fully resolved, presenting no active or imminent national security threat.
• Autonomy: Human-controlled. The database system operated as a simple automated tool without autonomous decision-making or planning capabilities.
• Novelty: Established threat. Software glitches and database errors are well-established technical issues, though the scale of the resulting physical riots was highly unusual.

Impact by dimension

• Physical security: Minor. The glitch indirectly led to localized violence, including the stoning of Pepsi trucks and grenade attacks on plants, but did not target critical national infrastructure.
• Information security: Negligible. No evidence of state-sponsored information warfare, intelligence compromise, or malicious adversarial AI campaigns.
• Sovereignty: Negligible. The incident did not threaten state authority, border control, or core constitutional processes.
• Economic security: Negligible. While Pepsi suffered financial losses and market share decline, there was no threat to the nation's strategic economic or technological security.
• Societal stability: Substantial. The system failure triggered widespread civil unrest, riots, and violent protests across the Philippines, resulting in multiple deaths and thousands of legal cases.