On November 8 the U.S. Federal Bureau of Investigation (FBI) notified the National Bureau of Investigation (NNI) Transatlantic Operations Department that an internet user linked to Hungary had made violent, life-threatening statements to an artificial intelligence (AI)‑driven chatbot. The AI platform’s developer and operator reported the conversation to the FBI, which then contacted Hungarian authorities.
Content of the threat and rapid identification
The chat logs showed the user planned a knife attack: the alleged plan was to enter an acquaintance’s home through an open window, mutilate and kill that person with a knife, and also attack family members. Because the statements were explicit and the intended victim could be identified in a short time, authorities considered immediate international cooperation necessary.
NNI investigators, working with FBI agents assigned to Hungary, obtained the chat content and used data from the AI application together with the registry of foreign residents in Hungary to prioritise and identify the user.
Arrest and search
The 22-year-old woman, who has been studying in Hungary for several years, was arrested at her rented flat in Budapest on November 12. Officers searched the premises, seized her mobile phone and computer, and forensic investigators extracted electronic data from those devices.
Charge, statement and legal steps
After being taken into custody, the woman was questioned as a suspect on the charge of preparing murder. In her statement she said she had been intoxicated while chatting with the bot and did not remember the messages, and denied having any intention to kill anyone.
The NNI placed the suspect in criminal custody and sought her detention. According to the Police.hu statement, the prosecution decided to release her.
Why this matters
The case illustrates that content generated or exchanged with AI‑based chat services can prompt urgent police action and cross-border cooperation when it contains concrete, life-threatening intent. Authorities say rapid responses and reporting from service operators are essential for preventing and investigating such threats.
