PIR-2026-0002 - iTutorGroup's automated recruiter rejects 200+ applicants by age; first US AI-hiring settlement

id: PIR-2026-0002
title: iTutorGroup pays $365K after recruitment software auto-rejected female applicants 55+ and male applicants 60+
date_occurred: 2020 (automated rejections)
date_detected: 2020 (a rejected applicant resubmitted an identical application with a more recent birth date and was offered an interview)
date_disclosed: 2022-05-05 (EEOC suit filed, E.D.N.Y., 1:22-cv-02565); settlement filed 2023-08-09
status: corroborated (EEOC filings, court record, five-year consent decree)

The agent

agent_description: iTutorGroup's tutor-recruitment application software, which screened and rejected US-based applicants for online English-tutoring roles with no human review of individual decisions.
operator_type: enterprise
autonomy_level: autonomous-within-policy (fully automated rejection authority; the policy itself was the defect)
model_stack: unknown (rule-configured screening software; internals never disclosed)
harness: proprietary applicant-tracking/screening system
failure_locus: operator-config (the discriminatory rule was deliberately encoded by the operator)

Authority

authority_scope: data access (applicant PII incl. birth dates), decision authority over hiring outcomes (no funds, no code execution)
funds_at_risk_usd: unknown (lost wages to excluded applicants never aggregated)
blast_radius: customers/third parties (200+ external job applicants)

The failure

root_cause: operator-error - primary: deliberate discriminatory configuration. Contributing: policy-violation (automated execution of an ADEA-illegal rule at scale)
mechanism: The software was configured to automatically reject female applicants aged 55+ and male applicants aged 60+. In 2020 it screened out more than 200 qualified US applicants on age alone, at machine speed and with no human review. Exposed when one rejected applicant reapplied with an identical application bearing a more recent birth date and received an interview - a manual A/B test of the system.
adversary_present: no
exploitation_status: in-wild-malfunction (real applicants harmed in production; no attacker - reclassified from in-wild-exploited, which implies an adversary; the system faithfully executed a misconfigured policy)

Impact

severity: loss
direct_loss_usd: 365,000 (paid to the rejected applicants under the consent decree)
indirect_loss_usd: unknown (compliance program, training, five-year decree obligations)
downtime: none
data_exposure: none

Detection and recovery

detected_by: third-party (victim's own resubmission experiment, then EEOC)
time_to_detect: months (rejections in 2020; suit May 2022)
time_to_recover: settlement filed 2023-08-09, ~3 years after the rejections
remediation: $365K to ~200 applicants; affected applicants invited to reapply; anti-discrimination policy, training, and injunctions against age/sex screening and birth-date collection
structural_fix: five-year consent decree with EEOC monitoring
controls_that_worked: none internal - detection required a victim manually probing the system from outside

Legal

liability_holder: iTutorGroup, Inc. (operator; consent decree, no admission)
precedent_set: first US EEOC settlement over discrimination by an automated/AI hiring tool
sealed_material: no

Evidence

telemetry_grade: operator-logs (application-system records, surfaced through litigation into public court record)
sources:
- https://www.eeoc.gov/newsroom/itutorgroup-pay-365000-settle-eeoc-discriminatory-hiring-suit
- https://www.eeoc.gov/newsroom/eeoc-sues-itutorgroup-age-discrimination
- https://clearinghouse.net/case/44258/
- https://www.sullcrom.com/insights/blogs/2023/August/EEOC-Settles-First-AI-Discrimination-Lawsuit
- independence: regulator primary + court record + independent legal analyses - strong.
confidence: high (settlement figures and mechanism from EEOC and court record). Weakest link: none material.

Verification notes

All dates and the $365K figure verified against EEOC releases and the court record; suit-filed date sharpened from "May 2022" to 2022-05-05. Boundary case as flagged at intake: the rule was deliberately encoded, so root_cause primary moved from policy-violation to operator-error (deliberate configuration, not emergent agent behavior); the automated execution at scale is the agentic dimension. Recorded under the v0.1 legal block.

iTutorGroup's automated recruiter rejects 200+ applicants by age; first US AI-hiring…