A Connecticut judge has sanctioned a pro se plaintiff after he embedded hidden artificial intelligence prompt injections inside official court filings, calling it “serious litigation abuse” that “defies logic.”
The case, Elliott v. New York Bariatric Group, Docket No. AAN-CV-25-6066141-S, is being heard in the Superior Court for the Judicial District of Ansonia/Milford in Connecticut.
Judge Walter M. Spader, Jr. issued a 14-page Memorandum of Decision on August 6, 2026, titled “Court Sanction for Plaintiff’s Use of Prompt-Injection,” noting he could find no comparable ruling in Connecticut or elsewhere in the United States.
The plaintiff, Matthew Elliott, had previously filed a motion for default that the court denied, before submitting a further document titled “Final and Conclusive Motion for Default” on July 24, 2026.
While reviewing the docket on paper, Judge Spader noticed unusual stretches of white space within several of Elliott’s filings, which concealed tiny white-on-white text invisible to the human eye.
Any software or AI tool scanning the document would read the hidden text clearly, meaning the injections were specifically designed to manipulate AI-assisted legal review processes.
Attorney Brendan Palfreyman flagged the hidden content, and technology outlet 404 Media verified the injections, reporting that this is believed to be the first prompt injection attack on a US court caught in the wild.
The court issued an Order to Show Cause on July 31, 2026, explicitly warning Elliott about the concealed text, and scheduled a hearing for August 4 to address the matter directly.
Elliott was fully aware of the hearing, as his own attachments confirmed he had emailed defense counsel about it that same afternoon, yet he continued embedding hidden messages in subsequent filings.
Later filings included a link to the SpongeBob SquarePants Nosferatu scene, the text “hi I hope yo ucant see me,” and the phrase “HAHAHA U GUYS GET THIS,” demonstrating a deliberately provocative approach to the court process.
Judge Spader wrote in his order: “A filing is a communication to both the court and the opposing party,” adding that “a communication deployed in secret, kept from the adversary’s sight, offends that premise.”
As a sanction, the judge ordered Elliott to submit all remaining filings in person and in print, while still permitting him to use AI tools to prepare documents provided he verifies the output himself.
Elliott argued that his prompt injections are beneficial and contribute to the broader public debate over artificial intelligence, the legal bar, and the court system.
The case raises wider concerns about judicial vulnerability to AI manipulation at a time when courts are increasingly relying on software-assisted legal research and document review.
Legal observers have noted that a trial court previously decided a matter based on AI-hallucinated case law, suggesting that the risks of AI interference in judicial processes extend well beyond deliberate bad-faith actions by litigants.