EY Canada has withdrawn a cybersecurity report after researchers flagged apparent AI hallucinations, including fabricated data, fake footnotes and citations. GPTZero reportedly found around 60% of the report’s citations appeared to be fake or hallucinated. The report, titled 'Points of Attack', focussed on fraud risks in loyalty systems. EY removed it and said it's reviewing publication process.