Research showed AI training could be poisoned by as few as five documents in a training set of millions.