Real-world incidents include an AI coding agent accidentally deleting 1.9 million rows of customer data from a production database and Microsoft 365 Copilot's 'EchoLeak' vulnerability, which allowed zero-click prompt injection to exfiltrate sensitive organizational data.