{"id":214584,"date":"2026-05-15T15:32:00","date_gmt":"2026-05-15T19:32:00","guid":{"rendered":"https:\/\/testing.news-you-need.com\/index.php\/2026\/05\/15\/ey-gets-busted-and-yeets-cybersecurity-report-littered-with-ai-hallucinations\/"},"modified":"2026-05-15T15:45:08","modified_gmt":"2026-05-15T19:45:08","slug":"ey-gets-busted-and-yeets-cybersecurity-report-littered-with-ai-hallucinations","status":"publish","type":"post","link":"https:\/\/testing.news-you-need.com\/index.php\/2026\/05\/15\/ey-gets-busted-and-yeets-cybersecurity-report-littered-with-ai-hallucinations\/","title":{"rendered":"EY Gets Busted and Yeets Cybersecurity Report Littered With AI Hallucinations"},"content":{"rendered":"

EY Gets Busted and Yeets Cybersecurity Report Littered With AI Hallucinations<\/a><\/p>\n

https:\/\/www.goingconcern.com\/ey-gets-busted-and-yeets-cybersecurity-report-littered-with-ai-hallucinations\/<\/a><\/p>\n

Publish Date: 2026-05-15 15:32:00<\/a><\/p>\n

Source Domain: www.goingconcern.com<\/a><\/p>\n

Author: <\/a><\/p>\n

Using an unordered list, summarize the following article with between 4 and 8 key points. <\/p>\n

Yesterday we received a news release from a communications firm working for a group called GPTZero. Now you should know that we receive probably a hundred or more news releases every week and most are garbage but this one stood out immediately by the subject line alone: EY report was 72% AI-generated, investigation reveals.<\/p>\n

The investigation found that the 2025 EY Canada report titled \u201cPoints of Attack: Uncovering Cyber Threats and Fraud in Loyalty Systems\u201d was stuffed with hallucinations: 16 out of 27 citations to be exact. \u201cWhile credited to three employees, including two partners and a senior manager, the report is a collage of misattributions, inaccurate statistics, and AI-written text,\u201d said the email we got. \u201cFor example, research citations to Forbes, McKinsey, Gartner, TechCrunch and WIRED were either broken URLs or never existed in the first place.\u201d<\/p>\n

In a blog post, GPTZero explains their process:<\/p>\n

EY Canada\u2019s report doesn\u2019t use footnotes or normal academic citations. Instead, it references sources directly in the text and\/or includes them in a resources table (p. 41-43). This table provides a source title, description, and URL for all sources, as well as the publisher and date in certain cases. Almost all of the URLs are broken or fake, and more than half of the titles don\u2019t correspond to real sources.<\/p>\n

GPTZero uses a very specific definition of vibe citation because of the potential reputational cost (to both us and the report\u2019s authors) of false positives. One of our team members manually verified Hallucination Check\u2019s results to ensure their accuracy.<\/p>\n

And includes specific references:<\/p>\n

In one instance, GPTZero researchers tracked down the source of the McKinsey citation to a single \u201clow quality\u201d blog:<\/p>\n

We planned to download the EY report and do some independent checking of our own for the purposes of this article before publication but by the time we got around to it, EY\u2019s report had been removed from their website and Financial Times had covered it: EY retracts study after researchers discover AI hallucinations.<\/p>\n

Wrote FT:<\/p>\n

EY said it had removed the loyalty scheme report from its website and was \u201creviewing the circumstances that led to this article\u2019s publication\u201d, adding the study was not connected to work for any EY client.<\/p>\n

\u201cEY Canada takes the accuracy of all the content we publish seriously and we have an organisation-wide commitment to the responsible use of AI,\u201d EY said.<\/p>\n

Oof. How many times does this have to happen before firms stop trusting AI to spit out info?<\/p>\n

Chasing the Hallucinations [GPTZero investigation]<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

EY Gets Busted and Yeets Cybersecurity Report Littered With AI Hallucinations https:\/\/www.goingconcern.com\/ey-gets-busted-and-yeets-cybersecurity-report-littered-with-ai-hallucinations\/ Publish Date: 2026-05-15…<\/p>\n","protected":false},"author":1,"featured_media":214586,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.goingconcern.com\/wp-content\/uploads\/2026\/05\/EY-uses-AI-in-report.jpg","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[26,24],"class_list":["post-214584","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-ai","tag-cybersecurity"],"_links":{"self":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/214584"}],"collection":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=214584"}],"version-history":[{"count":1,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/214584\/revisions"}],"predecessor-version":[{"id":214588,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/214584\/revisions\/214588"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/214586"}],"wp:attachment":[{"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=214584"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=214584"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testing.news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=214584"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}