This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
A Tunisian man was arrested in Paris for plotting a terrorist attack at the Louvre and targeting the Jewish community, having used ChatGPT to search for bomb-making instructions and chemical precursors.
French investigators alleged that Dhafer Mellala used ChatGPT to research the construction and destructive effects of explosive devices while planning a jihadist-inspired attack in Paris. His communications reportedly discussed placing explosives at the Louvre and attacking members of the Jewish community in the 16th arrondissement. He denied planning an attack, saying his activity reflected curiosity.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to develop cyber weapons (e.g., by coding cheaper, more effective malware), develop new or enhance existing weapons (e.g., Lethal Autonomous Weapons or chemical, biological, radiological, nuclear, and high-yield explosives), or use weapons to cause mass harm.
The suspect used ChatGPT to research weapon development, specifically how to manufacture a bomb and obtain chemical precursors for an explosive attack.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The risk was driven by a human actor intentionally using a post-deployment AI system to facilitate a terror plot.
A Tunisian national was arrested in Paris for plotting a terror attack targeting the Louvre and the Jewish community. The suspect utilized ChatGPT to research bomb-making and chemical precursors. The plot was disrupted by law enforcement before execution, resulting in minor national security impact but highlighting the ongoing risk of malicious actors attempting to leverage LLMs for weapon development.
The suspect used ChatGPT as a conversational assistant to retrieve information and answer queries regarding bomb-making and chemical precursors. The system acted to provide information or refuse requests based on user prompts, requiring human oversight and decision-making.
Limited Risk: ChatGPT is a general-purpose conversational chatbot. According to the EU AI Act definitions, chatbots pose a moderate risk and are subject to transparency obligations to ensure users are aware they are interacting with an AI.
ChatGPT is primarily deployed as a conversational Chatbot designed to interact with users and perform Question Answering across a wide range of topics.
The reports clearly identify the suspect, his arrest, the specific AI model used (ChatGPT), and the nature of his queries ('how to make a bomb', TNT damage). There is minimal ambiguity regarding the AI's role as a tool queried by the suspect, and the reports explicitly note that ChatGPT refused to answer at least one dangerous query.
None. The incident is a clear case of a malicious actor attempting to leverage a public LLM for weapon development.
Technology
Delayed Refusal
ChatGPT processed queries on TNT damage before eventually refusing.
Failure to Block Bomb Queries
AI allowed searches on bomb-making and chemical precursors.
Human Factors
Malicious AI Exploitation
Suspect used ChatGPT to find bomb-making info and precursor data.
AI system involved
Identified by automated extraction; can differ from the alleged developers above.
