Using historical data to train risk assessment tools could mean that machines are copying the mistakes of the past.