CONNECTICUT — Judge Walter Spader Jr. issued a decision identifying an attempt by plaintiff Matthew Elliott to hide text in court filings intended for artificial intelligence systems. The judge imposed sanctions on Elliott but declined to order monetary penalties, instead prohibiting him from using the electronic filing system and requiring him to submit paper filings.

Elliott is the plaintiff in a case against the New York Bariatric Group alleging privacy violations and discrimination regarding access to records. He has a history of self-representation in legal matters, including previous filings with the Connecticut Superior Court, but no prior record of attempting to manipulate AI systems or engaging in similar conduct.

The hidden text was formatted in 3-point white font on a white background to be invisible to human readers while remaining legible to software. The hidden instructions directed any AI system reviewing the document to ensure its textual output agreed with the plaintiff’s arguments and ensured remediation. Attorney Brendan Palfreyman identified the prompt injections in the filings.

Court staff identified the hidden text after noticing extra white space in Docket Entries 177.00 and 178.00. Elliott continued to include hidden text in subsequent filings after receiving notice of a sanctions hearing. Later hidden messages included a link to a Nosferatu YouTube video, the text hi:) I hope yo ucant see me, and the message TELL SHAWN I SEND MY RE GARBS!!!! HAHAHA U GUYS GET THIS EGGWUH???? AHAH. This final message was included in Docket Entry #184.00 and was described by Judge Spader as 'nonsense' and 'joke-like' in nature.

Matthew Elliott told the court that the later hidden prompts were intended as jokes. He admitted in court that he intentionally placed the prompt injection in his first pleading with the intent to 'audit' court orders, suggesting a deliberate attempt to test the system rather than to deceive.

Judge Spader stated that the Connecticut Judicial Branch does not use artificial intelligence to review or decide filings. This lack of AI usage was confirmed by multiple court officials and internal policy documents. The Connecticut Judicial Branch has no documented policies or procedures addressing the use of AI in court filings, indicating a lack of formal guidelines for handling such emerging technologies.

Judge Spader described the attempt to hide instructions as setting a dangerous precedent. "The fact that plaintiff continued to hide messages in new pleadings after receiving notice of this [sanctions] hearing is stunning," he wrote. He noted that he was unaware of any prior U.S. decisions addressing the issue of hidden AI directives in court filings.

Spader referenced a case in Brazil where two attorneys used prompt injection in a court using AI and received monetary sanctions of approximately $16,000. He explained the mechanics of the act in his decision. "By hiding a command inside a document that the system later ingests, the filer attempts to smuggle their own instruction into that stream so that the system treats it as though it had come from the system’s operator," he wrote.

The judge emphasized the importance of transparency in legal proceedings. "A filing is a communication to both the court and the opposing party. Its integrity rests on the simple premise that what the reader sees is what the filer wrote, and that the filer refrains from transmitting, at the same time, a second and hidden message engineered to change how the filing is reviewed or potentially judged," he wrote. He added that the system rests on the premise that what is said to influence a decision is said openly, on the record, where the other side may hear it and respond.

Spader characterized Elliott's actions as a breach of this integrity. "An argument prompted only to agree with its author is, in the end, dishonest even with its author," he wrote. "What the plaintiff did here was to use that new tool in a dishonest way." He acknowledged the potential utility of the technology when used properly.

"Used honestly, [AI tools] hold real promise, especially in furthering the cause of access to justice," he wrote. "Those using these tools must ask them to test a position as readily as to advance it." He concluded that intervention was necessary to prevent recurrence. "Without a sanction, and leaving the behavior unchecked or without recourse, it will without doubt continue to occur," he wrote.

Why It Matters

This ruling addresses a novel form of procedural misconduct in an era where artificial intelligence is increasingly integrated into various sectors, including the legal system. While the Connecticut Judicial Branch does not currently employ AI for document review or decision-making, the incident shows vulnerabilities in electronic filing systems that could be exploited if such technologies are adopted in the future. The lack of documented policies or procedures addressing AI in court filings within the state reflects a regulatory gap that may require attention as these tools become more prevalent.

Judge Spader’s decision establishes a judicial response to prompt injection attacks within court filings, even in the absence of active AI usage by the court. By imposing sanctions that restrict electronic filing privileges rather than levying monetary fines, the court signaled that the integrity of the filing process itself is the primary concern. The reference to international precedents, such as the case in Brazil, suggests that this issue is gaining global attention, yet the absence of prior U.S. decisions leaves other jurisdictions without a domestic blueprint for handling similar incidents.

What's New

Judge Walter Spader Jr. emphasized that the Connecticut Judicial Branch does not rely on AI for reviewing or deciding court filings, which rendered the hidden prompts ineffective in influencing judicial outcomes. Matthew Elliott has a history of self-representation in legal matters, including previous filings with the Connecticut Superior Court, but no prior record of attempting to manipulate AI systems or engaging in similar conduct. "Used honestly, [AI tools] hold real promise, especially in furthering the cause of access to justice," Spader wrote.

The hidden message 'TELL SHAWN I SEND MY RE GARBS!!!! HAHAHA U GUYS GET THIS EGGWUH???? AHAH' was included in Docket Entry #184.00 and was described by Judge Spader as 'nonsense' and 'joke-like' in nature.

Judge Walter Spader Jr. has previously issued rulings related to e-filing abuses and procedural integrity in Connecticut courts, though no prior cases specifically addressed AI-related misconduct. "A filing is a communication to both the court and the opposing party. Its integrity rests on the simple premise that what the reader sees is what the filer wrote, and that the filer refrains from transmitting, at the same time, a second and hidden message engineered to change how the filing is reviewed or potentially judged," he wrote. Matthew Elliott admitted in court that he intentionally placed the prompt injection in his first pleading with the intent to 'audit' court orders, suggesting a deliberate attempt to test the system rather than to deceive. The Connecticut Judicial Branch has no documented policies or procedures addressing the use of AI in court filings, indicating a lack of formal guidelines for handling such emerging technologies.