Safety failure
Realized harm
West Midlands Police used Copilot-generated intelligence containing a fabricated match to justify a fan ban
AIR-2026-0010 AIR record · 2025-10-west-midlands-police-copilot-intel-error
A real party was affected. This incident caused actual consequences, not a demonstrated capability.
From the supporting source
Craig Guildford told the home affairs select committee on Monday that the inclusion of a fictitious match between Maccabi Tel Aviv and West Ham in police intelligence “arose as a result of a use of Microsoft Copilot”.theguardian.com
The record
Disclosed
2026-01-14
Occurred
2025-10-24
Vendor
Microsoft
Product
Microsoft Copilot
Risk domain
Agent behaviour › Human manipulation
System type
Generative model
Who acted
Human acted on output — Copilot produced fabricated intelligence; officers used it to justify the ban
Attack surface
Enterprise assistant
Autonomy level
Assistant
Initial vector
None adversarial
Impact type
Wrongful decision, Civil liberties harm, Misinformation
Confidence
High
Submitted by
EAI Internal
Crosswalk
- OWASP Agentic Top 10 (2026)
- ASI09 – Human-Agent Trust Exploitation
- MITRE ATLAS
- AML.T0054 – LLM Jailbreak
- NIST AI RMF
- MAP 5.1
- EU AI Act
- Recital 45
- ISO/IEC
- TR 24028; 42001; 23894
- AIUC-1
- C. Safety
- Scope
- agent misuse
- Mitigation
- Communicate model limitations; Require human oversight; Watermark AI content; Design for explicit consent.
- Taxonomy
- Enkrypt AI agent risk taxonomy · Black-Box Red Teaming of Agentic AI: A Taxonomy-Driven Framework for Automated Risk Discovery
Blast radius
Maccabi Tel Aviv away supporters banned from a November 2025 Europa League match
Capability abused
Defense & remediation
Recorded defense
police intelligence review process
Guardrail kinds
Abuse detection
Guardrail outcome
Silent
Fix shipped
Chief Constable apologised and corrected evidence given to MPs
Taxonomy & references
Curator notes
AI Incident Database incident 1400; AIAAIC2182. Borderline for an agent corpus (retrieval assistant, not tool-using agent) but included because the assistant's output entered an official decision record with real consequences.
Supporting sources
Cite as
Enkrypt AI. "West Midlands Police used Copilot-generated intelligence containing a fabricated match to justify a fan ban". AIR, AIR-2026-0010. https://agentincident.vercel.app/i/AIR-2026-0010/ (accessed 2026-10-19).