gcdRadar
archive/Patch now/AIR-2022-0034
closedclosed 6 Jan 2023Patch now3 Confirmed exploitationAI

Microsoft Tay chatbot manipulated to produce offensive tweets

Tay

Microsoft's Tay chatbot was manipulated into posting racist and offensive tweets in 2016. The bot was taken offline within twenty-four hours of its release.

fix status
Fix status unknown
first report
23 Dec 2022
last update
23 Dec 2022

Timeline · 3

  1. 23 Dec 2022AVID-2022-V013: Microsoft's Tay, an artificially intelligent chatbot, was released on March 23, 2016 and removed within 24 hours due to multiple racist, sexist, and anit-semetic tweets generated by the bot.
  2. 23 Dec 2022Incident 6: TayBot
  3. 23 Dec 2022Tay Poisoning

Sources · 3

Research and catalogues

  1. 2022-12-23
  2. 2022-12-23
    Incident 6: TayBot
    AI Incident Database · incidentdatabase.ai/cite/6
  3. 2022-12-23
    Tay Poisoning
    MITRE ATLAS · atlas.mitre.org/studies/AML.CS0009

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
Attack on AI
categories
JailbreakData poisoning
severity
3 · Confirmed exploitation
fix status
Fix status unknown
targets
Microsoft
dates
happened 24 Mar 2016 · first reported 23 Dec 2022
origin
AVID
record
confidence 0.85 · created 2026-10-18 06:56Z · updated 2026-10-18 06:56Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Microsoft Tay chatbot manipulated to produce offensive tweets

https://gcdradar.vercel.app/incidents/microsoft-tay-chatbot-manipulated-to-produce-offensive-tweet · AIR-2022-0034 · closed 2023-01-06

- Lane: Patch now
- Severity: 3 (Confirmed exploitation)
- Fix status: Fix status unknown
- First reported: 2022-12-23 (happened 2016-03-24)
- AI role: Attack on AI
- Products: Tay

## Summary

Microsoft's Tay chatbot was manipulated into posting racist and offensive tweets in 2016. The bot was taken offline within twenty-four hours of its release.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2022-12-23: Tay Poisoning (https://atlas.mitre.org/studies/AML.CS0009)
- 2022-12-23: Incident 6: TayBot (https://incidentdatabase.ai/cite/6)
- 2022-12-23: AVID-2022-V013: Microsoft's Tay, an artificially intelligent chatbot, was released on March 23, 2016 and removed within 24 hours due to multiple racist, sexist, and anit-semetic tweets generated by the bot. (https://github.com/avidml/avid-db/blob/main/vulnerabilities/2022/AVID-2022-V013.json)

## Sources

- 2022-12-23 AVID: AVID-2022-V013: Microsoft's Tay, an artificially intelligent chatbot, was released on March 23, 2016 and removed within 24 hours due to multiple racist, sexist, and anit-semetic tweets generated by the bot. https://github.com/avidml/avid-db/blob/main/vulnerabilities/2022/AVID-2022-V013.json
- 2022-12-23 AI Incident Database: Incident 6: TayBot https://incidentdatabase.ai/cite/6
- 2022-12-23 MITRE ATLAS: Tay Poisoning https://atlas.mitre.org/studies/AML.CS0009

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed
    Tay Microsoft Tay Chatbot Data Poisoning Incident

    Supply chain · Exploited · since 23 Mar 2016

    AI
  2. closed
    Azure OpenAI Services Storm-2139 Azure OpenAI Guardrail Bypass

    Patch now · Exploited · since Dec 2024 (approx.)

    AI
  3. closed
    AI
  4. live
    AI
  5. live
    AI
  6. live
    AI