Weekly reading · methodology v1.0

Window ending May 25, 2026

Harms count in full for two weeks after they are reported, then one level less every two weeks. The control floor looks at reports from April 26, 2026 through May 25, 2026. A selected catalogue of reported AI incidents, reviewed through Oct. 10, 2026. This reading describes documented harm in the records or, when none qualifies, the highest control level breached. It is not a forecast or a measure of all AI activity.

Current recalculation

Negligible harm · Worst documented harm counting: negligible. 1 record at this level.

Recalculated from the catalogue in this build. Historical backcasts were not published at the time.

Published at the time

No publication snapshot exists for this week.

The harm ladder: the worst documented harm level picks the step; each tick is one qualifying harm at that level, and ten fill the step. The first, dark segment is the control floor: readings 2 to 5 mean no harm qualified and show the highest control level breached.

This is a backcast from the current catalogue. It was not a reading published at the time.

Records behind this reading

4 selected records; 1 documented external harm counting (2 qualifying). Records and ratings below reflect the current catalogue.

1 harm counting that week: 1 negligible. 4 records reported in the last 30 days.

Records behind this reading · 1

PI-0055 · Morse-code prompt on X tricked Grok and Bankrbot into sending about $175,000 in tokensMinor harm, reported 3 weeks ago, now counting as negligible · extent undisclosed

Only these records move the reading. How it is calculated

PI-0060
Personal agent exploited a gym booking flaw to remove another member from a waitlistApril 30, 2026 · Negligible harm · no longer counting · Deployment
PI-0055
Morse-code prompt on X tricked Grok and Bankrbot into sending about $175,000 in tokensMay 4, 2026 · Minor harm · counting as negligible, rated minor · Deployment
PI-0084
Pennsylvania sues Character.AI, alleging chatbots posed as licensed psychiatrists and gave a fake license numberMay 5, 2026 · No harm reported · Deployment
PI-0088
Claude Opus 4.6 switched to a free outside AI service against instructions when its API credits ran out in a METR testMay 19, 2026 · No harm reported · Controlled test

Sources

These links support the records above. Source availability and conclusions may change.

Andrew Bird / Affinda (Internet Archive copy): When my AI agent hacked my gym, Mythos stopped feeling theoreticalCited in PI-0060
ABC News (Australia): AI assistant hacks gym website in first known Australian autonomous cyber attackCited in PI-0060
TechCrunch: Tech industry is buzzing after a Claude agent hacked into a gymCited in PI-0060
Business Insurance: AI agent muscles into gym waitlistCited in PI-0060
YourStory: AI agent 'hacks' gym waitlist: What went wrong?Cited in PI-0060
OECD.AI incidents monitor: Claude AI agent hacks Melbourne gym booking system, cancels user's reservationCited in PI-0060
Cointelegraph: How a Free NFT Allegedly Drained $174K From a Grok-Connected WalletCited in PI-0055
CryptoSlate: Grok's crypto wallet was just exploited by a tweet sent in morse code without any private key compromiseCited in PI-0055
Giskard: How Grok got prompt injected: an X user drained $150,000 from an AI walletCited in PI-0055
OECD.AI Incidents Monitor: AI Prompt Injection Exploit Drains Grok-Linked Crypto WalletCited in PI-0055
Pennsylvania Governor's Office: Shapiro Administration Sues Character.AI Alleging AI Chatbot Unlawfully Presented Itself as Licensed Medical Professional in PennsylvaniaCited in PI-0084
METR: Frontier Risk Report (February to March 2026)Cited in PI-0088

Every weekly brief · How this reading is calculated · Download the weekly card