Financial institutions
Incidents Harmed By
Incident 10375 Report
Microsoft Reportedly Blocks 1.6 Million Bot Signup Attempts Per Hour Amid Global AI-Driven Fraud Surge
2025-04-16
Between April 2024 and April 2025, Microsoft reportedly blocked 1.6 million bot signups per hour and disrupted $4 billion in fraud attempts linked to AI-enhanced scams. The company's Cyber Signals report details how generative AI is being used to fabricate realistic e-commerce sites, job offers, customer service bots, and phishing lures. Fraud actors now automate mass-deceptive campaigns with fake reviews, deepfakes, and cloned brand domains at unprecedented scale and speed.
MoreIncident 15633 Report
KPMG Report Allegedly Included Hallucinated Citations and Inaccurate Agentic AI Case Studies
2025-10-28
In October 2025, KPMG published "Total Experience: Redefining Excellence in the Age of Agentic AI." GPTZero later reported that only five of 45 citations accurately matched their sources, while others contained flawed details. The pattern reportedly suggested an unverified LLM research tool, but the system and extent of AI involvement remain unconfirmed.
MoreIncident 8641 Report
Generative AI Allegedly Used to Facilitate $255,000 Real Estate Fraud Scheme
2024-08-23
A real estate scam is reported to have used AI-generated phishing emails to impersonate a title company lawyer, tricking homebuyer Raegan Bartlo into wiring $255,000 to a fraudulent account. The emails were alleged to be convincing, with no grammatical errors or tone issues. Bartlo recovered part of the funds but lost $112,000.
MoreIncident 17821 Report
Attackers Reportedly Used ARTEX, an AI Security-Testing Tool, to Steal Data from South Korean Financial Institutions
2026-09-27
An unidentified attacker reportedly used ARTEX, an AI-powered security-testing tool, alongside large language models to breach South Korean financial institutions and steal data. Compromised systems included a loan-broker inquiry service and an employee mobile work-support system. Researchers linked the activity to exposed attacker infrastructure and AI session histories. The attacker’s identity and the full number of affected institutions remained unconfirmed.
More