Italian Privacy Authority Fines Character.AI for Data Protection and Child Safety Failures
Date: 2026-07-09
Attack vector: rce
Category: real-world
Severity: High

Tracked by the OECD AI Incidents and Hazards Monitor (AIM) as OECD-AIM-2026-07-09-06ea, dated 2026-07-09. Classified attack vector: rce. See the AIM incident page (https://oecd.ai/en/incidents/2026-07-09-06ea) and its cited news sources for full narrative detail.


Mitigations:

Architectural layers (MAESTRO):