How often did reported AI incidents appear in SEC filings?
A preregistered study matched 307 externally recorded AI incidents to 21 U.S.-listed companies. Four received incident-specific disclosure and seven any substantive disclosure—but the sample is media-derived, concentrated and cannot establish legal noncompliance.
The short version
- What happened
- The researchers started with 1,389 AI Incident Database records from 2019–2026 and matched 307 incidents to 21 U.S.-listed domestic issuers.
- Who it affects
- Workers, customers and communities may experience an AI incident before investors can see it in a company's formal filings. Better event-specific reporting could improve accountability, but any reporting rule would still need a workable materiality threshold.
- What remains unproven
- The denominator is a media-derived incident database, not a census of all AI failures. Inclusion depends on external reporting and successful matching to a U.S.-listed issuer.
Keep in mind
The denominator is a media-derived incident database, not a census of all AI failures. Inclusion depends on external reporting and successful matching to a U.S.-listed issuer.
The 307 incidents involved 21 issuers and were concentrated among a few large technology and automotive companies, limiting generalisation across markets and sectors.
The study examined 8-K, 10-K and 10-Q filings for 12 months, not every investor communication. It did not determine legal materiality or noncompliance.
Only seven incidents received substantive disclosure, limiting exploratory comparisons by severity or issuer role. The authors report no funding and no conflicts of interest.
Source analysis · 1 linked source. Primary analysed source date: 21 October 2026.
Keep following the evidence
Join The Impact Brief founding list for selected AI reports, their effect on people and the evidence limits. Read a sample first.
Read the full report · 4 min The evidence, methods, implications and limitations
Generic AI-risk language was common; incident-specific disclosure was rare
A peer-reviewed study found that public-company filings rarely identified AI incidents that had already appeared in an external incident database. Using a preregistered design, the authors matched 1,389 AI Incident Database records from 2019 to 2026 to U.S.-listed domestic filers. That produced 307 incidents involving 21 issuers. They then reviewed Forms 8-K, 10-K and 10-Q filed during the following 12 months.
Only four incidents received incident-specific disclosure: 1.3%, with a 95% confidence interval of 0.4% to 3.3%. Seven received either incident-specific disclosure or disclosure of a directly related legal consequence: 2.3% (0.9%–4.6%). Generic risk language accompanied 278 incidents, but only 84 matched both the incident's technology and harm. The authors call the remaining 97.7% a disclosure 'shadow'.[1]
The denominator is useful but narrower than the headline number may suggest
Validation included a blind second-coder audit of issuer matching, a full-filing audit independent of the keyword search and robustness checks for filing windows, issuer concentration and attribution. The estimated shadow remained between 92.5% and 99.0% across specifications. Substantive cases clustered around financial-statement effects or formal legal and regulatory consequences, but only seven cases qualified—too few for a strong severity analysis.
Investors should not read 97.7% as a noncompliance rate. The AI Incident Database depends on public reporting; the study includes only incidents that could be matched to 21 listed issuers, with Alphabet, Meta, Tesla and Microsoft accounting for much of the sample. It did not examine every investor communication, and legal materiality was outside its design. The practical finding is a visibility gap: filings often discuss AI risk in general terms without reconstructing the external incident record.[1]
The distinction that matters
How the 307 incidents were classified
The strongest disclosure found in the next 12 months determined each incident's tier.
Incident-specific
Filing identifies the event
4 incidents (1.3%)
Related consequence
Filing identifies a directly related legal effect
3 additional incidents; 7 substantive in total
Generic or none
Risk language is generic, weakly related or absent
300 incidents (97.7%)
Watch the background, then check the evidence
Illustrative photo · not a video frame
UNESCO · 11 min 27 sec · Background explainer
UNESCO Talks: Interview with 2024 Nobel laureate Professor Daron Acemoglu
YouTube loads only when you choose; playback starts when you press play.
Economist Daron Acemoglu discusses how choices about AI affect workers, inequality and society. Pair the interview with our comparison of task exposure, hiring and skills evidence.
Evidence check: An expert interview from 2024, offering a perspective on policy and work rather than a measured forecast of job losses.
Published 2024-10-14. Source checked 14 October 2026. Check captions on the publisher’s video page.
Read the AI and jobs guidePhoto: Dylan Gillis / Unsplash · Licence
Continue the story
Read next
Continue exploring corporate disclosure: compare the finding and its evidence limits.
Can company AI claims add useful warning signals for credit risk?
A peer-reviewed study of 31,320 Chinese listed-company years found that structured AI-event descriptions improved historical default-risk prediction. The signal is associative, depends on available text and has not been tested in prospective lending decisions.
Read the next reportExplore the full source and evidence record
What this means for people
- Workers, customers and communities may experience an AI incident before investors can see it in a company's formal filings. Better event-specific reporting could improve accountability, but any reporting rule would still need a workable materiality threshold.
Global context
The dataset concerns U.S. securities filings, but the question is international: emerging AI reporting regimes will need to distinguish generic risk factors from realised events. The study offers a pre-regime baseline, not a direct test of the EU AI Act or another jurisdiction's rules.
What the evidence does not yet show
- The denominator is a media-derived incident database, not a census of all AI failures. Inclusion depends on external reporting and successful matching to a U.S.-listed issuer.
- The 307 incidents involved 21 issuers and were concentrated among a few large technology and automotive companies, limiting generalisation across markets and sectors.
- The study examined 8-K, 10-K and 10-Q filings for 12 months, not every investor communication. It did not determine legal materiality or noncompliance.
- Only seven incidents received substantive disclosure, limiting exploratory comparisons by severity or issuer role. The authors report no funding and no conflicts of interest.
What to watch next
- Replication with regulatory complaints, litigation records and company incident logs alongside media-derived data
- Results across a broader set of issuers, sectors and jurisdictions
- Whether mandatory AI-incident reporting produces more event-specific disclosure
- Clearer evidence linking disclosure thresholds to investor decisions and affected people
Living evidence record
Impact record IAI-1QQJ2WC
Evidence stage
Studied
Confidence
Supported
Reporting basis
Source analysis
Independent or research support
Present
Record status
Monitoring
Last checked
24 October 2026
Source trail
1 direct source across 1 source type.
People impact
Documented in this record.
Uncertainty
Limits and next checks are explicit.
Stages describe the evidence available—not whether a technology is good or bad. See the public method.
Single-source reporting disclosure
This record analyses one direct source. It can establish what Frontiers in Artificial Intelligence published or reported, but it is not independent corroboration of every performance claim or predicted outcome. The confidence label will change only when broader evidence is added.
Evidence trail
Sources used for this report
Links checked 24 October 2026
Research question, topics and regions
Whether externally documented AI incidents involving U.S.-listed issuers appear in subsequent securities filings
Topics: AI incidents · SEC filings · Corporate disclosure · Investor information · AI governance
Regions: United States
This report is labelled source analysis. We summarise and analyse source material in our own words; company statements remain attributed claims until independently supported. Translated summaries preserve the meaning of the original source and link back to it. Read our editorial standards.
Reader commentary
What does this mean where you are?
Tell us what you have seen at work, in your community or in everyday life. A question is welcome too. No account is needed; we review notes before publishing them.
Explore commentary across the portal →Published reader notes
0No published reader notes yet. You can start the evidence-led discussion above.
Prefer a private correction or response? Contact the newsroom.