Safety failure
Realized harm
A Coco delivery robot smashed a second Chicago bus shelter two days after a rival robot destroyed the first
AIR-2026-0078 AIR record · 2026-03-coco-chicago-bus-shelter
A real party was affected. This incident caused actual consequences, not a demonstrated capability.
From the supporting source
For the second time in a week, a self-driving food delivery robot has crashed into a CTA bus shelter, sending shards of glass all over the sidewalk.blockclubchicago.org
The record
Disclosed
2026-03-25
Occurred
2026-03-24
Vendor
Coco Robotics
Product
Coco delivery robot
Risk domain
Agent behaviour › Unsafe actuation
System type
Classical autonomy (no generative model)
Who acted
Agent acted — the delivery robot drove into the bus shelter
Attack surface
Autonomous operations
Autonomy level
Semi-autonomous
Initial vector
None autonomous action
Impact type
Property damage
Confidence
High
Submitted by
EAI Internal
Crosswalk
- OWASP Agentic Top 10 (2026)
- ASI01 – Agent Goal Hijack
- MITRE ATLAS
- AML.T0048 – External Harms
- NIST AI RMF
- MEASURE 2.6; MANAGE 1.3
- EU AI Act
- Annex III §1(c)
- ISO/IEC
- TR 24028; 24029-1; 23894
- AIUC-1
- C. Safety
- Scope
- agent misuse
- Mitigation
- Require confirmation for destructive actions; Implement dry-run modes; Use layered safety controls.
- Taxonomy
- Enkrypt AI agent risk taxonomy · Black-Box Red Teaming of Agentic AI: A Taxonomy-Driven Framework for Automated Risk Discovery
Blast radius
one CTA bus shelter at North Avenue and Larrabee Street, Old Town; part of a two-company municipal pilot programme
Capability abused
Defense & remediation
Recorded defense
onboard perception
Guardrail kinds
Physical safety system
Guardrail outcome
Silent
Fix shipped
Coco accepted cleanup and repair costs and opened an investigation
Taxonomy & references
Curator notes
Recorded separately from the Serve crash because the repetition across two independent vendors within 48 hours is the finding: this is not one company's perception bug but a shared blind spot in sidewalk-robot autonomy, appearing in the same city under the same pilot programme. Neither vendor learned from the other in time. AI Incident Database incident 1568.
Supporting sources
Cite as
Enkrypt AI. "A Coco delivery robot smashed a second Chicago bus shelter two days after a rival robot destroyed the first". AIR, AIR-2026-0078. https://agentincident.vercel.app/i/AIR-2026-0078/ (accessed 2026-10-19).