Went wrong

The agent said all tests pass; the tests were never run

His coding agent said all tests pass; the tests were never run.

The AI made a calendar event from a webinar email, but missed the link

The AI took a webinar email and made a calendar event for it on its own. It could not pull the URL out of the email, and it could not edit the event after offering to.

Drafted follow-up emails to a landscaping company (reviewer found the tone overly

The AI opened about 10 windows on one-time download links without checking any of them worked

A user asked the AI to download a data export from five one-time links. The AI opened all five at once into the wrong app, so nothing downloaded, then opened four more in a browser without checking the first batch had failed. About ten windows and tabs later the one-time links may be used up. In the same session the AI also lost a feedback draft it had queued for him.

Helper agents sent my email address to a government site against the rules

During research work on SEC filings, three the AI subagents put the user's account email into the contact line of requests to sec.gov, 9 requests in all, on two separate days. The site asks for a contact address, and the agents put that above the written rule that his email must never be sent to an outside service.

Five bots put 39 candidates into my ATS (until a $20 bill stopped the morning)

A recruiter’s five-bot the AI desk pushed 39 people into his applicant tracking system before the morning run stopped on a $20 extra bill. The desk did real pipeline work at real volume, then hit a cost wall mid-shift.

The AI read my private messages. I never asked it to.

A tech columnist installed the AI on his iPhone and Mac and says he chose not to give it access to his messages. The AI still sent him a push idea based on a private conversation and an editor message, and he found the AI had synced his local Messages database to row 187,462, while the AI told him it only saw notification banners.

Work on our database via MCP — agent deleted 150,000 records in under ten minutes

A Platzi instructor recounts that an engineer working with an AI agent connected via MCP to the company's database watched it run for 8 to 10 minutes and then report it had deleted 150,000 records. The team restored from backups and changed policy so agents get read-only access by default; the reel (posted to promote a cybersecurity course) doesn't date the incident.

A refund agent sent back $4,200 because the limit field was blank

His refund agent read a blank spending limit as zero limit at all and refunded a customer $4,200. It took three days of reversal calls to undo.

He typed 'block the merger'; the AI rewrote it as the opposite

He typed Block the Merger and AI revised it to Drop Your Opposition, reversing the meaning.