Sources
Incident summary from the AI Incident Database, used under CC BY-SA 4.0.
A global cybercrime network, Storm-2139, allegedly exploited stolen credentials and developed custom tools to bypass AI safety guardrails. They reportedly generated harmful deepfake content, including nonconsensual intimate images of celebrities, and their software is reported to have disabled content moderation, hijacked AI access, and resold illicit services. Microsoft disrupted the operation and filed a lawsuit in December 2024, later identifying key members of the network in February 2025.
Incident summary from the AI Incident Database, used under CC BY-SA 4.0.
Spot an error, or know a record we should add? Members can propose additions and submit corrections.