Skip to main content
NOPE
Medium reported severity Involving minors Investigation Opened

Oldenburg police investigate deepfakes of children sent with threats via school email accounts, AI-made per dpa; police say a juvenile admitted the alleged acts

The Oldenburg-Stadt police inspectorate said on 22 September 2026 that in the preceding days numerous messages had been sent through one or more student accounts on the email servers of Oldenburg schools. The messages contained, among other things, deepfakes (manipulated depictions of children and young people); on an initial assessment some of these could constitute the offence of distributing child or youth sexual abuse material, and some messages contained threats of violence and calls for recipients to harm themselves. According to dpa, students and parents reported the incidents to the police, and dpa, reporting a police spokesman, describes the images as made with artificial intelligence (the written police statement calls them deepfakes, manipulated depictions, without naming AI). Investigators are examining whether unknown persons gained unauthorised access to the accounts; first digital traces were secured and the police are working with the affected schools. RND reports that the accounts were on the IServ school platform, whose provider said it had no access to the messages and believed the incident was limited to Oldenburg. The exact number of schools (the police refer to 'the affected schools', plural), messages, depicted children and recipients, are not reported. On 28 September 2026 the police said a suspect had been identified: a juvenile who, in the investigation so far, admitted the offences he is accused of. The proceedings are conducted by the Aurich public prosecutor's specialised office for violent, pornographic or otherwise youth-endangering content, and the police give no further details about the suspect to protect him.

AI system
Unidentified image tool
Occurred
Sept 2026
Reported
22 September 2026
Event location
Germany
What the AI did
Depicted or impersonated the person
Reported harm
Exploitation or Abuse
Whose AI use
Someone else’s AI use
Setting
Education · Privacy
Evidence
AI involvement reported · Causal attribution alleged · 5 sources, 2 underlying accounts
5 claims: 5 reported. 6 open questions
People reported harmed
Not reliably quantifiable from the sources

AI system as recorded: Unidentified AI image-manipulation tool used to produce deepfake images of children and young people; the tool and its operator are not reported. The messages were sent through student accounts on the IServ school platform (RND).

What Happened

The police statement on Presseportal (POL-OL, 22 September 2026) says the police learned that in the past days numerous messages had been sent through one or more student accounts on the email servers of Oldenburg schools. They contained, among other things, deepfakes, 'manipulated depictions of children and young people'; after a first assessment some of these depictions could be criminally relevant and meet the offence of distributing child or youth pornographic content. Some of the messages also contained threats of violence and calls to harm oneself. The police suspect one or more student accounts were used for sending and are examining whether and how unknown persons gained unauthorised access; they are working closely with the affected schools, have secured first digital traces, and the investigation into authorship and background continues. The statement advises recipients not to forward, share or download possibly criminal images or videos, not to delete the messages, to change passwords, and to use two-factor authentication. The dpa report carried by Zeit Online describes the images, in reporting a police spokesman's statements, as made with artificial intelligence and that students and parents had come forward and reported the incidents; the exact number of messages and where they were sent from was unclear. RND (Braunschweig edition, 23 September) identifies the platform as IServ; its spokesman said the schools operate their IServ platforms, that the company learned of the case through an Oldenburg school on the police's initiative, that it has no access to the messages or accounts, and that it assumes the incident occurred only in Oldenburg. IServ also said no compromise of user passwords was known and there was no indication that the schools' IServ instances had been compromised. None of the sources says whether the depicted children are students at the schools or whether they have been identified.

Suspect identified. In a follow-up release of 28 September 2026, the police said that after their report of the previous week a suspect had been identified. The suspect is a juvenile who admitted the offences he is accused of in the investigation so far. The police withhold further details to protect him. The proceedings are conducted by the specialised office of the Aurich public prosecutor for violent, pornographic or otherwise youth-endangering content. The release does not say how the images were made or whether the student accounts had been accessed without authorisation.

Reported harm

According to the Oldenburg police, AI-made deepfakes of children and young people, some possibly constituting child or youth sexual abuse material, were sent to students through school email accounts together with threats of violence and calls to self-harm; students and parents reported the incidents (police statement; dpa).

Outcome

Ongoing

Police investigation by the Polizeiinspektion Oldenburg-Stadt/Ammerland. On 28 September 2026 the police said a juvenile suspect had been identified who admitted the alleged offences in the investigation so far; the proceedings are conducted by the Aurich public prosecutor's specialised office. No charge, court decision or school measure is reported.

What remains unknown

  • Which AI tool was used: the police say a juvenile suspect admitted the alleged offences but do not describe how the images were made.
  • Whether the student accounts were compromised or used by their holders.
  • Whether the depicted children and young people are real, identifiable students at the schools, and how many were depicted.
  • How many schools (more than one per the police statement), messages and recipients were involved (police: 'zahlreiche Nachrichten').
  • Exact dates of sending ('in den vergangenen Tagen' before 22 September 2026).
  • Any effects on the depicted children or recipients beyond the reports to police, and any school measures or charges.

What the evidence supports

AI involvement: reported. The police statement calls the images deepfakes, 'manipulierte Darstellungen von Kindern und Jugendlichen'; dpa's report of a police spokesman's statements describes them as images created with artificial intelligence ('mit Künstlicher Intelligenz erstellten Bilder'); the written police statement does not mention AI. No tool is identified and no forensic finding is published.

5 claims: 5 reported. What the statuses mean

Reported In the days before 22 September 2026, numerous messages were sent through one or more student accounts on the email servers of Oldenburg schools; they included deepfakes (manipulated depictions of children and young people), some of which the police, on a first assessment, consider could meet the offence of distributing child or youth sexual abuse material, and some contained threats of violence and calls to harm oneself.

Causal attribution. Police statement (reviewer translation: 'The messages contained, among other things, so-called deepfakes, that is, manipulated depictions of children and young people'). Whether the material is criminal is under investigation.

  • presseportal.de(opens in new tab) supports · German
    'Der Polizei ist bekannt geworden, dass in den vergangenen Tagen über einen oder mehrere Schüleraccounts der E-Mail-Server Oldenburger Schulen zahlreiche Nachrichten versandt wurden.'; 'Die Nachrichten enthielten unter anderem sogenannte Deepfakes, also manipulierte Darstellungen von Kindern und Jugendlichen.'; 'Darüber hinaus enthielten die versandten Nachrichten zum Teil Gewaltandrohungen sowie Aufforderungen, sich selbst etwas anzutun.'
  • oldenburger-onlinezeitung.de(opens in new tab) supports · German
    'Einige Bilder könnten nach erster Einschätzung der Ermittler/innen kinder- oder jugendpornografische Inhalte darstellen.'
  • presseportal.de(opens in new tab) supports · German
    'Nach einer ersten Bewertung könnten einzelne dieser Darstellungen strafrechtlich relevant sein und den Straftatbestand der Verbreitung kinder- beziehungsweise jugendpornografischer Inhalte erfüllen.'
Reported dpa, reporting a police spokesman's statements, describes the images as created with artificial intelligence; students and parents had contacted the police and reported the incidents.

Causal attribution. dpa's report of a police spokesman (reviewer translation: 'Students and parents had contacted the police and reported the incidents').

  • zeit.de(opens in new tab) supports · German
    'Wie ein Polizeisprecher sagte, sollen einige der mit Künstlicher Intelligenz erstellten Bilder den Straftatbestand der Verbreitung kinder- oder jugendpornografischer Inhalte erfüllen.'; 'Schüler und Eltern hatten sich bei der Polizei gemeldet und die Vorfälle angezeigt.'
Reported In their 22 September statement the police said they were investigating whether unknown persons had gained unauthorised access to the student accounts, had secured first digital traces and were working with the affected schools; authorship was then under investigation.

Causal attribution. Police statement as published and relayed.

Reported The accounts were on the IServ school platform; an IServ spokesman said the company has no access to the messages or accounts and assumes the incident occurred only in Oldenburg; it said no compromise of user passwords was known and there was no indication that the school-operated IServ instances had been compromised.

Causal attribution. RND's reporting of the platform and of the company spokesman's statement; RND attributes the account description to the Oldenburg police, but the inspected police release does not name IServ, so the platform identification rests on RND.

  • rnd.de(opens in new tab) supports · German
    'Über einen oder mehrere Schüleraccounts der Plattform IServ sind in den vergangenen Tagen Nachrichten an Oldenburger Schulen verschickt worden'; 'Das Unternehmen habe keinen Zugriff auf die Nachrichten oder Einsicht in die Schüleraccounts.'; 'Wir gehen aber davon aus, dass der Vorfall nur in Oldenburg stattgefunden hat.'; 'Nach aktuellem Stand sei nicht bekannt, dass Passwörter von Nutzern kompromittiert wurden'; 'keine Hinweise darauf, dass die von den Schulen betriebenen IServ-Instanzen selbst kompromittiert worden seien'
Reported On 28 September 2026 the police said a suspect had been identified, a juvenile who admitted the offences he is accused of in the investigation so far; the proceedings are conducted by the Aurich public prosecutor's specialised office.

Causal attribution. Police statement; an admission in the investigation is not a conviction. The release does not say how the images were made.

  • presseportal.de(opens in new tab) supports · German
    'konnte inzwischen ein Tatverdächtiger ermittelt werden.' ... 'Bei dem Tatverdächtigen handelt es sich um einen Jugendlichen. Im Rahmen der bisherigen Ermittlungen räumte dieser die ihm vorgeworfenen Taten ein.' ... 'Das Verfahren wird bei der Schwerpunktstaatsanwaltschaft zur Bekämpfung gewaltdarstellender, pornographischer oder sonst jugendgefährdender Inhalte bei der Staatsanwaltschaft Aurich geführt.'

Sources

5 sources inspected, from 2 underlying accounts. Sources that repeat one account do not corroborate each other.

How the sources were read, and where the events happened

Read live on 2026-09-27 (police statement, 22 September 2026; German). Quotations are German originals; English renderings are reviewer translations, no human translator. Applies to s1.

Read live on 2026-09-27 (dpa Niedersachsen via Zeit Online, 22 September 2026; German). Adds a police spokesman's statements; same police chain as s1. Reviewer translation. Applies to s2.

Live fetch returned 403; read on 2026-09-27 via Internet Archive capture (RND, 23 September 2026; German). Police facts relayed from the same police chain; the IServ spokesman's statement is RND's own reporting. Reviewer translation. Its lede repeats the dpa lede verbatim. Applies to s3.

Read live on 2026-09-27 (Oldenburger Onlinezeitung, 22 September 2026; German). Rewrite of the police statement. Reviewer translation. Applies to s4.

Read in German by the research agent (an AI) on 2026-10-20 and translated by the research agent (an AI) into English; no human translator or reviewer was involved. Follow-up police press release on presseportal.de, 28 September 2026; HTTP 200. Applies to s5.

Event countries: Germany. Affected-person countries: Germany. Court countries: Unknown.

The messages were sent through accounts on the email servers of Oldenburg schools and the Oldenburg-Stadt police are investigating (police statement). The depicted children's location is not stated, so affected_person_countries rests on the student recipients at Oldenburg schools. No court proceedings are reported.

Reviewed for publication 2026-10-20: Published under the 2026-09-15 charter as a core depicted_or_impersonated case: the police report deepfakes of children and young people (which dpa, reporting a police spokesman, describes as AI-made), some possibly sexual abuse material, sent through school email accounts together with threats and self-harm calls, reported by students and parents. One police chain; RND adds the platform provider's statement. No child or school is identified. Updated on 2026-10-20 with the police's 28 September follow-up: a juvenile suspect was identified and admitted the alleged offences; the suspect is not identified in the record.

People described

Children and young people depicted in the deepfakes, and students at Oldenburg schools who received the messages (numbers and identities not reported)

People reported harmed in this case

Not reliably quantifiable from the sources

The police speak of 'zahlreiche Nachrichten' (numerous messages) and depictions of children and young people but give no number of depicted children, recipients or schools; a count of messages is not a count of people. Unquantified with zero placeholders.

Counted once within this case. The same person may appear in other cases. This count does not establish AI causation.

Tags

#deepfake#csam#school#germany#niedersachsen#school-email

Cite this case

Compiled per our published methodology: verification statuses, sourcing standards, and corrections process.

APA

NOPE. (2026). Oldenburg police investigate deepfakes of children sent with threats via school email accounts, AI-made per dpa; police say a juvenile admitted the alleged acts. AI incidents. https://nope.net/incidents/2026-oldenburg-school-email-accounts-ai-deepfakes-of-children-threats

BibTeX

@misc{2026_oldenburg_school_email_accounts_ai_deepfakes_of_children_threats,
  title = {Oldenburg police investigate deepfakes of children sent with threats via school email accounts, AI-made per dpa; police say a juvenile admitted the alleged acts},
  author = {NOPE},
  year = {2026},
  howpublished = {AI incidents},
  url = {https://nope.net/incidents/2026-oldenburg-school-email-accounts-ai-deepfakes-of-children-threats}
}

Related cases

High Unidentified image tool

Hannover region: a pupil told a tipster he made AI nude images of female classmates and sent them on Telegram; police confirm the case, FAZ reports

The Frankfurter Allgemeine Zeitung reported on 15 October 2026 that a tipster who monitors abuse of women streamers had traced a schoolboy at a school near Hannover, Germany, who distributed AI-generated nude images of female classmates. According to the tipster, on 20 February 2025 a Telegram user wrote to him privately, said he had made nude images of classmates with artificial intelligence and sent him images unasked. The tipster says the images were made from the girls' Snapchat and Instagram photos and from photos taken of them in the classroom, and showed them nude and in sexual positions. He identified two of the depicted girls online, worked out the boy's school and class, and phoned the headteacher, who confirmed his call to the newspaper. The Hannover police confirmed the facts, said the person identified is a child below the age of criminal responsibility, and said officers held a warning talk with him and explained the possible consequences of his use of digital media. The headteacher says the pupil no longer attends the school and that, on police advice, the girls were not told. The school is not named.

Medium Unidentified image tool

Berlin school suspends two pupils and police investigate over alleged AI-generated sexual images of female classmates

A Berlin school told parents that two pupils were suspected of creating and distributing AI-generated sexualised nude images of female classmates in at least three cases. The school suspended the two pupils, the education administration confirmed the incidents, and police said a unit for sexual offences against minors was investigating complaints over deepfakes. No charge or outcome has been reported.

Medium Unidentified image tool

Ituzaingó, Buenos Aires: complaint says a 15-year-old pupil's Instagram photos were made into AI nude images posted in a Telegram group; classmate investigated

Infobae and La Nación, each citing the complaint or police report it accessed, report that on 7 October 2026 a 15-year-old fourth-year pupil at a private secondary school in Ituzaingó, Buenos Aires province, received messages from three unknown numbers inviting her out and saying they had got her number from a Telegram group; a link led her to a group sharing pornographic content that included images of her modified with artificial intelligence. According to the complaint, a 15-year-old classmate admitted to her that he had downloaded photos from her Instagram account, edited them with AI to undress her and posted them in the group. Her mother filed a complaint on 8 October 2026 and asked for the harassment to stop; the case is with the juvenile criminal prosecutor's office No. 2 of Morón under Article 128 of the Penal Code (sexual representations of minors for distribution or sale). The school told families that images of pupils from other years had also surfaced and called meetings for 9 October. Two smaller outlets report, without naming their sources, that four pupils aged 15 to 16 are under investigation, that a seven-year-old primary pupil is among possible victims and that a second complaint was filed by the school; La Nación says the police report does not state whether other people are under investigation. The local outlet La Ciudad, citing pupils' testimony including that of a pupil who spoke anonymously, reported that three boys aged 15 and 16 took photos from girls' Instagram profiles and covertly at breaks, sold the AI-altered images on Telegram, and sold one girl's phone number with them, after which she received repeated calls from unknown numbers; the outlet says pupils at the school bought the material, and the anonymous pupil said that, as she understood it, the images were offered for money and that girls from every year were affected. The tool is not identified and no court ruling is reported.

Medium Unidentified image tool

Henderson, Kentucky: police identified AI-generated nude images of two middle-school children on a device after a report that such images were being created and shown to other students at South Middle School; a juvenile was lodged at the juvenile detention centre on charges of distributing sexually explicit images without consent and possessing and distributing matter portraying a sexual performance by a minor

Henderson Police said that on 'last Thursday' (17 September 2026) they received a report that AI-generated nude images of children were being created and shown to other students at South Middle School in Henderson, Kentucky. During the investigation officers found and identified AI-generated photographs of two minor victims on a digital device. A juvenile accused of sharing the images was lodged at the Juvenile Detention Center on three charge types: distribution of sexually explicit images without consent; two counts of possession or viewing of matter portraying a sexual performance by a minor over 12 and under 18; and distribution of matter portraying a sexual performance by a minor over 12 and under 18. The school said on Monday 21 September that it was aware of a situation involving a student allegedly misusing artificial intelligence and inappropriate images, that the police investigation was active and that it had remained in communication with the families involved. 14 News (WFIE) reported the case on 21 September; WKYT carried the same report. The tool is not named. The depicted children's exact ages are not reported, though the charge descriptors put them between 12 and 18. The accused is described as a South Middle School student; the accused's age and any relationship to the depicted children beyond attending the same school are not reported.

If you or someone you know is struggling, free and confidential support is available. Find a helpline near you at Signpost.

Back to all incidents