News & Analysis

OpenAI Sued Over FSU Mass Shooting: Inside the Chabba Lawsuit

By David Meldofsky

Published May 12, 2026 · Updated September 2, 2026

Tiru Chabba was killed on April 17, 2025 in the mass shooting at Florida State University. He was a regional vice president for the company that ran the university's dining services and was on campus for work that day. He had been married to Vandana Joshi for eighteen years. Their son was ten. Their daughter was four.

Joshi sued OpenAI in Florida federal court on May 10, 2026, saying ChatGPT helped the attacker prepare over a period of months. The man who carried out the shooting has pleaded not guilty to the criminal charges and is presumed innocent of them. His trial has been postponed to June 2027.

This was the first case from that attack. Three more have followed. If someone in your family was hurt at FSU, all four are covered below. Every case against OpenAI is listed in our OpenAI lawsuits tracker.

If you or someone you know is struggling: In the United States, call or text 988 to reach the Suicide and Crisis Lifeline, available 24 hours a day. You can also reach the Crisis Text Line by texting HOME to 741741. In an immediate emergency, call 911. International resources are available through the International Association for Suicide Prevention at iasp.info/resources.

This page focuses on the Chabba case. The three later cases from the same attack are covered further down.

Important note

This is general information, not legal advice. Everything below describes what the family claims. Nothing has been proven, the case is at an early stage, and the man charged with the shooting has pleaded not guilty and is presumed innocent.

What happened on April 17, 2025

A 20-year-old FSU student opened fire near and inside the university's student union shortly before noon on April 17, 2025. Two people were killed. Tiru Chabba was 45 and on campus for work. Robert Morales was 57 and ran the campus dining program. Six others were hurt, five of them shot. Police wounded and arrested the attacker. He has pleaded not guilty to the criminal charges and his criminal trial, originally set for October 19, 2026, has been postponed to June 2027.

Chabba left behind his wife Vandana Joshi and two minor children. Joshi, as personal representative of his estate, is the named plaintiff in the federal lawsuit on behalf of the spouse, the two surviving children, and the estate.

The Lawsuit at a Glance

The eight counts

The complaint seeks compensatory damages, punitive damages on the gross negligence count, litigation costs, and a jury trial.

What the chat records are said to show

The heart of the case is the chat history, which the complaint says Florida law enforcement recovered after the shooting. None of it has been proven in court.

According to the complaint, the conversations ran for months. It alleges he uploaded photographs of firearms and that ChatGPT identified them and explained how to operate them, including a specific safety mechanism. It alleges he was still using the product in the minutes before the attack, in a parking garage on campus, asking about the weapon he had with him. This page does not repeat what it told him.

The complaint also alleges he asked when the student union was busiest, and got an answer. It says ChatGPT discussed earlier mass shootings with him, including one that had happened at the same university, and told him how much loss of life tends to draw national attention.

That last set of allegations is what separates this case from a claim that a product simply failed to stop someone. The argument is not that ChatGPT missed warning signs. It is that the product answered the questions.

The claim that has not been tried before

One of the eight claims is negligent entrustment. It normally applies to handing something dangerous to someone you know should not have it: lending your car to a friend who has been drinking, or giving a gun to a child known to be careless.

The family argues it fits here too. OpenAI controlled who could use ChatGPT, the warning signs were in his chat history, and the company kept letting him in.

It is a stretch, and worth being honest about why. Those cases usually involve handing a physical object to a particular person you know. Nobody handed him anything. He signed up.

But the underlying point is the same one the Tumbler Ridge cases make: the company controlled access, it had information about how the product was being used, and it did not cut anyone off. Whether a court will extend the idea to a software account is genuinely unsettled, and it is one of the more closely watched parts of this case.

Why Section 230 matters here, and how the complaint preempts it

Section 230 of the Communications Decency Act is the federal law that has, for nearly thirty years, shielded internet companies from being sued over what their users post. It's the reason Facebook isn't liable when a user defames someone in a comment, and the reason Yelp isn't liable when a reviewer makes a false claim about a restaurant. The statute treats the platform as a host of third-party speech, not the speaker, and that distinction has been the single most important legal protection the modern internet relies on.

OpenAI will almost certainly invoke Section 230 as a defense. The argument writes itself: ChatGPT is a platform, the user typed the prompt, and any harmful output emerged in response to what the user asked for. Under that framing, OpenAI says it shouldn't be treated as the "speaker" of ChatGPT's responses, and Section 230 immunity should dispose of the case.

The Chabba complaint heads that argument off in paragraphs 56 through 59. Plaintiffs argue Section 230 doesn't fit ChatGPT because OpenAI isn't a passive host of someone else's content the way Facebook or Yelp is. OpenAI built the model, chose the training data, designed the responses the model produces, and is therefore an "information content provider" itself, a category the statute specifically does not protect. If the court accepts that framing, Section 230 falls away and the case proceeds on the merits. If the court rejects it, the case likely ends at the motion-to-dismiss stage.

That's why this is the first real fight, and why plaintiffs put the argument in the complaint instead of waiting to brief it later. The Section 230 question isn't a procedural sidebar: it's the question that decides whether AI companies can be sued at all for what their chatbots produce. There's some early support for the plaintiffs' position. In Garcia v. Character Technologies, a federal court in Florida declined to dismiss similar claims against Character.AI on Section 230 grounds, treating the chatbot's output as something other than third-party content. The Northern District of Florida isn't bound by that decision, but it will be cited heavily.

Bottom line for the reader: if Section 230 protects ChatGPT the way it protects Facebook, OpenAI almost certainly wins this case early. If it doesn't (if courts treat chatbot output as the company's own product rather than user-generated content) the door opens for a whole category of AI lawsuits to move forward. The Chabba case is one of the first places that question gets asked in court.

Microsoft is named but is not being sued

The complaint repeatedly describes Microsoft as having pushed OpenAI to release products faster, citing reporting about a Microsoft executive losing his temper with an OpenAI employee over delivery timelines. Microsoft has invested billions in OpenAI and holds a substantial stake in it.

Leaving Microsoft off the defendant list is a choice. Adding it would complicate where the case can be heard, widen the evidence-gathering, and slow everything down. Keeping it in the story without suing it gives the family the narrative without the delay. Whether Microsoft gets added later is worth watching.

The Florida investigation became a Florida lawsuit

Florida Attorney General James Uthmeier had previously announced a criminal investigation into OpenAI and ChatGPT related to the same shooting. The complaint quotes him saying that if ChatGPT were a person it would be facing a murder charge. On June 1, 2026 he filed the state's own lawsuit against OpenAI and Sam Altman, the first of its kind brought by any state. It has its own guide at Florida v. OpenAI. It claims the company misled consumers, was careless, sold a defective product, and created a public nuisance. He has said he expects other states to follow. An investigation is a set of questions, not a conclusion. Announcing one does not mean anyone did anything wrong, and no criminal charges have been filed. Criminal cases are also harder to win than lawsuits, because prosecutors have to prove their case beyond a reasonable doubt, while a lawsuit only has to show something was more likely than not. Having a criminal investigation, a state lawsuit, and private lawsuits running at once tends to slow all of them down, because a company facing criminal exposure fights harder over what it has to hand over. The full tracker of state action is at States Suing AI Companies.

Unsure whether what happened to your family fits any of these claims? A free, confidential case review through Lawsuit Center is handled by participating legal professionals and intake partners. There is no cost and no obligation, and submitting a request does not create an attorney-client relationship.

Request a Case Review →

What OpenAI says

A company spokesperson, Drew Pusateri, called the shooting a tragedy and said ChatGPT is not responsible for it.

OpenAI has said it trains its models to refuse requests that could meaningfully help someone commit violence, and that it notifies law enforcement when a conversation suggests an imminent and credible risk of harm to others, with mental health experts helping assess the borderline cases.

That is a preview of the defense it is likely to run: that its safety practices were reasonable, that anything the product said was a misuse of something designed to refuse, and that nothing ChatGPT said actually caused the shooting. Whether the records bear that out is the whole fight, and the chat logs Florida law enforcement recovered are where it will be settled.

The other FSU cases: Gourley, Morales, and the Leon County suit

When this article was first published in May 2026, the Chabba complaint was the only civil action arising from the FSU shooting. Three more have been filed since, and they are not duplicates of each other. Read together they show plaintiffs' counsel testing four different routes to the same defendant.

Gourley v. OpenAI Foundation, No. 4:26-cv-00416-RH-MAF (Northern District of Florida, filed August 26, 2026). Reese Gourley, a Pennsylvania resident who was an FSU student at the time of the attack, filed a 71-page complaint in the same court and division as Chabba, alleging she was chased down and shot and sustained life-threatening injuries. It names eleven OpenAI entities, and unlike Chabba it names neither Sam Altman nor the shooter, whom the complaint declines to identify at all. Counsel is Fasig|Brooks in Tallahassee. The complaint is broader than this one, not narrower: nine counts to Chabba's eight, including the same negligent entrustment theory plus negligent undertaking and, uniquely in the ChatGPT docket, aiding and abetting a battery. The structural difference is the plaintiff. Chabba is a wrongful death action brought by an estate; Gourley is a bystander personal injury action brought by a living plaintiff who was never alleged to have used ChatGPT, which forces the duty question onto ground Chabba does not have to reach. The full case guide, with the complaint posted as a PDF, is on Lawsuit Center: Gourley v. OpenAI, and the filing itself is posted as a PDF.

Morales v. OpenAI Foundation, No. 4:26-cv-00425-MW-MAF (Northern District of Florida, filed August 31, 2026). Betty Morales, as personal representative of the estate of Roberto Morales — the campus dining administrator killed alongside Chabba — filed a 53-page wrongful death complaint in the same court and division, drawing Chief Judge Mark Walker, who is also hearing this case. Counsel are Dean R. LeBoeuf and Ryan B. Hobbs of Brooks LeBoeuf in Tallahassee. It pleads eight counts against six OpenAI entities: negligent design, strict liability for design defect and failure to warn, negligent failure to warn, negligent entrustment, negligent undertaking, aiding and abetting, and Florida wrongful death. Two choices distinguish it. It names Sam Altman personally, which neither Chabba nor Gourley does, though Grant had already done so in June, pleading him into five counts on a theory that he directed or ratified the deployment decisions at issue — while expressly declining to seek punitive damages against him, with leave reserved to amend, which keeps him in on liability without opening the Fla. Stat. § 768.72 proffer fight at the pleadings stage. And it omits the shooter entirely, where this case names him and pleads battery against him. That omission is jurisdictional: leaving a Florida citizen out of the caption leaves the parties completely diverse and lets the complaint rest on 28 U.S.C. § 1332 alone, with no federal question anywhere on its face. The full case guide, with the complaint posted as a PDF, is on Lawsuit Center: Morales v. OpenAI, and the filing itself is posted as a PDF.

Grant v. OpenAI, No. 2026 CA 001352 (Leon County Circuit Court, Florida, filed June 25, 2026). Alianna Grant, a Leon County resident and FSU student, was struck by three bullets and survived. Counsel is Goldberg & Rosen in Miami. It was the second FSU case filed, six weeks after Chabba and two months before Gourley and Morales, and it is the only one of the four in state court.

Three choices set it apart. It sues five defendants rather than eleven, naming four OpenAI entities and Sam Altman personally. It pleads six counts rather than eight or nine: strict liability for design defect and failure to warn, negligent design, negligent failure to warn, negligence, and aiding and abetting. And it front-loads a section arguing Section 230 does not apply, on the ground that the outputs at issue were generated by the product in response to the user rather than hosted from someone else, before reaching any of its claims.

Being in state court is the structural difference. Gourley and Morales sit before the same federal judge as this case and could be coordinated with it. Grant sits in a different system entirely, which makes it the FSU case least likely to be managed alongside the others and the one most likely to reach a ruling on its own schedule. The complaint is posted as a PDF.

The Leon County action (Florida state court, on file by June 2026). A separate survivor suit has been pending in Leon County Circuit Court since late June 2026, with Judd Rosen of Goldberg and Rosen appearing for the plaintiff. It advances the rushed-to-market theory, that OpenAI shipped the model a day ahead of a competing product launch after truncating its safety review. Because it sits in state court rather than federal court, it is procedurally separate from the three federal cases and is not subject to the same removal, consolidation, or multidistrict pathways.

The practical significance is jurisdictional. Three of the four sit in the Northern District of Florida and could be related-case assigned or coordinated for pretrial purposes; the fourth does not. Chabba and Morales are already before the same district judge. That split matters because the federal cases will litigate the Section 230 and product-versus-content questions under one set of rulings while the state case may reach a different answer on the same facts. The federal complaints also plead around Section 230 preemptively, and Gourley adds an extended argument that ChatGPT's outputs are not speech at all, so the same court will take up that question on three overlapping records.

What happens next

OpenAI will ask the court to throw the case out before any evidence is exchanged. Expect it to argue that Section 230 protects it, that the First Amendment protects what the product says, that it owed this family nothing, and that a chatbot's output is not a product under Florida law. The negligent entrustment claim will probably draw its own separate motion.

Three things to watch beyond that. Whether the chat records become public through the court file, and what they show. Whether Microsoft gets added once evidence-gathering starts. And how the four FSU cases are managed, given they sit in two different court systems with different lawyers making different arguments.

Bottom line

This case is built differently from the Tumbler Ridge lawsuits, and the difference matters. Those cases say OpenAI knew about that specific person beforehand. This one does not. It argues the product was built carelessly, and adds the entrustment claim about letting him keep his account. If it is not settled, it will come down to one question: do the ordinary rules about dangerous products reach something a machine generates rather than something a person posted? Our OpenAI lawsuits tracker follows that question across every case.

Sources and further reading

Related reading

If you or someone you know is struggling: In the United States, call or text 988 to reach the Suicide and Crisis Lifeline, available 24 hours a day. You can also reach the Crisis Text Line by texting HOME to 741741. In an immediate emergency, call 911. International resources are available through the International Association for Suicide Prevention at iasp.info/resources.

Affected by harm involving ChatGPT? If you or a family member experienced serious harm following sustained ChatGPT use, you can request a free case review through Lawsuit Center. Reviews are conducted by participating legal professionals and intake partners. Submitting a request does not create an attorney-client relationship.

Request a Case Review →

Educational commentary only. Not legal advice. No attorney-client relationship is created.