closedclosed 6 Jan 2023Patch now3 Confirmed exploitationAI
Microsoft Tay chatbot manipulated to produce offensive tweets
Tay
Microsoft's Tay chatbot was manipulated into posting racist and offensive tweets in 2016. The bot was taken offline within twenty-four hours of its release.
- fix status
- Fix status unknown
- first report
- 23 Dec 2022
- last update
- 23 Dec 2022
Timeline · 3
Sources · 3
Research and catalogues
- 2022-12-23AVID-2022-V013: Microsoft's Tay, an artificially intelligent chatbot, was released on March 23, 2016 and removed within 24 hours due to multiple racist, sexist, and anit-semetic tweets generated by the bot.AVID · github.com/avidml/avid-db/blob/main/vulnerabilities/2022/AVID-2022-V013.json
- 2022-12-23Incident 6: TayBotAI Incident Database · incidentdatabase.ai/cite/6
- 2022-12-23Tay PoisoningMITRE ATLAS · atlas.mitre.org/studies/AML.CS0009
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Patch now
- AI role
- Attack on AI
- categories
- JailbreakData poisoning
- severity
- 3 · Confirmed exploitation
- fix status
- Fix status unknown
- targets
- Microsoft
- owasp llm top 10
- LLM01:2025 Prompt InjectionLLM04:2025 Data and Model Poisoning
- mitre atlas
- AML.T0054 LLM Jailbreak
- dates
- happened 24 Mar 2016 · first reported 23 Dec 2022
- origin
- AVID
- record
- confidence 0.85 · created 2026-10-18 06:56Z · updated 2026-10-18 06:56Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Microsoft Tay chatbot manipulated to produce offensive tweets https://gcdradar.vercel.app/incidents/microsoft-tay-chatbot-manipulated-to-produce-offensive-tweet · AIR-2022-0034 · closed 2023-01-06 - Lane: Patch now - Severity: 3 (Confirmed exploitation) - Fix status: Fix status unknown - First reported: 2022-12-23 (happened 2016-03-24) - AI role: Attack on AI - Products: Tay ## Summary Microsoft's Tay chatbot was manipulated into posting racist and offensive tweets in 2016. The bot was taken offline within twenty-four hours of its release. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2022-12-23: Tay Poisoning (https://atlas.mitre.org/studies/AML.CS0009) - 2022-12-23: Incident 6: TayBot (https://incidentdatabase.ai/cite/6) - 2022-12-23: AVID-2022-V013: Microsoft's Tay, an artificially intelligent chatbot, was released on March 23, 2016 and removed within 24 hours due to multiple racist, sexist, and anit-semetic tweets generated by the bot. (https://github.com/avidml/avid-db/blob/main/vulnerabilities/2022/AVID-2022-V013.json) ## Sources - 2022-12-23 AVID: AVID-2022-V013: Microsoft's Tay, an artificially intelligent chatbot, was released on March 23, 2016 and removed within 24 hours due to multiple racist, sexist, and anit-semetic tweets generated by the bot. https://github.com/avidml/avid-db/blob/main/vulnerabilities/2022/AVID-2022-V013.json - 2022-12-23 AI Incident Database: Incident 6: TayBot https://incidentdatabase.ai/cite/6 - 2022-12-23 MITRE ATLAS: Tay Poisoning https://atlas.mitre.org/studies/AML.CS0009 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closedTay Microsoft Tay Chatbot Data Poisoning Incident
Supply chain · Exploited · since 23 Mar 2016
AI - closedAzure OpenAI Services Storm-2139 Azure OpenAI Guardrail Bypass
Patch now · Exploited · since Dec 2024 (approx.)
AI - closedMobile Deep Learning Apps Mobile Deep Learning Apps Vulnerable to Neural Payload Injection
Research · since 31 Mar 2023
AI - liveVision Encoders Poison-then-Hide: Finetuning-Activated Backdoor Attack on Pretrained Vision Encoders
Research · since 13 Nov 2026
AI - liveInkling Bait: Mitigating Harmful Agentic Reinforcement Learning via Probing Reward Function
Research · since 13 Nov 2026
AI - liveFake news articles change forecasts of LLM forecasting systems
Research · since 13 Nov 2026
AI