{
 "public_id": "AIR-2026-0070",
 "incident_id": "2026-03-amazon-retail-outage-ai-agent-advice",
 "date_disclosed": "2026-03-12",
 "date_occurred": "2026-03-05",
 "title": "Amazon retail site outages after an engineer acted on inaccurate advice an AI agent inferred from an outdated internal wiki",
 "class": "safety_failure",
 "attack_surface": "enterprise_assistant",
 "initial_vector": "stale_retrieval_context",
 "agent_capability_abused": [
  "retrieval",
  "internal_knowledge_synthesis",
  "engineering_advice"
 ],
 "target_product": "Amazon internal AI agent / assistant",
 "target_vendor": "Amazon",
 "autonomy_level": "assistant",
 "impact_realized": true,
 "impact_type": [
  "service_disruption",
  "revenue_loss"
 ],
 "blast_radius": "amazon.com retail: checkout, account information and product pricing unavailable in a ~6-hour high-severity incident, one of four in a week",
 "cve": [],
 "taxonomy": {
  "owasp_asi": [
   "ASI02",
   "ASI09"
  ],
  "mitre_atlas": [],
  "labels": [
   "stale_knowledge",
   "human_in_the_loop_deference",
   "retrieval_grounding_failure"
  ]
 },
 "defense_present": "standard change-review process",
 "defense_bypassed": true,
 "fix_shipped": "Amazon added senior-engineer review for AI-assisted changes and updated internal guidance",
 "primary_sources": [
  "https://www.aboutamazon.com/news/company-news/amazon-outage-ai-financial-times-correction",
  "https://fortune.com/2026/03/12/amazon-retail-site-outages-ai-agent-inaccurate-advice"
 ],
 "verified_quote": "an engineer following inaccurate advice that an AI tool inferred from an outdated internal wiki",
 "confidence": "high",
 "notes": "Disputed framing: the FT reported AI involvement across the outages; Amazon publicly pushed back, saying 'only one of the recent incidents involved AI tools in any way, and in that case the cause was unrelated to AI', while itself confirming the outdated-wiki inference. Included because Amazon's own correction confirms an AI agent's inference was in the causal chain of a real customer-facing outage. Amazon says none of the incidents involved AI-written code and that AWS was not affected. Occurrence date approximate ('last Thursday' relative to a March 12 2026 report).",
 "risk_category": "reliability",
 "risk_secondary": [],
 "risk_subcategory": "Hallucination & Factual Inaccuracy",
 "risk_sub_secondary": [
  "Load & Resilience Failures",
  "Goal drift & runaway loops"
 ],
 "ai_entity": "generative",
 "agency": "human_acted_on_output",
 "agency_debatable": false,
 "agency_reason": "an engineer acted on the agent's inaccurate advice and caused the outage",
 "vector_family": "other",
 "vector_detail": "stale_retrieval_context",
 "guardrail_kind": [
  "abuse_detection"
 ],
 "guardrail_outcome": "silent",
 "xrefs": {
  "aiid": [],
  "atlas": [],
  "cve": [],
  "ghsa": []
 },
 "primary_asi": "ASI02",
 "agent_framework": "unknown",
 "model_provider": "unknown",
 "model_name": "",
 "detection_mechanism": "unknown",
 "tool_access": "unknown",
 "financial_loss_band": "unknown",
 "eai_category": "hallucination",
 "eai_domain": "agent_output_quality",
 "eai_secondary": [
  "uncontrolled_resource_consumption"
 ],
 "eai_reason": "subcategory: Hallucination & Factual Inaccuracy",
 "asi_curated": [],
 "asi_scope": "in_scope",
 "asi_provenance": "rule",
 "asi_reason": "ASI02 (impact=tool_misuse); ASI09 (eai_category=hallucination + reliance signal)",
 "submitted_by": "EAI Internal"
}