{"meta":{"exportedAt":"2026-10-09T08:32:43.307Z","formatVersion":2,"selection":{"q":"security","system":"","harm":"","context":"","country":"","role":"","relation":"core","evidence":"","year":"unknown","response":"","severity":"","verification":"","view":"incidents","sort":"added"},"totalIncidents":6,"coverage":{"cases":6,"countries":2,"languages":2,"unknownLocation":3,"locationPending":0,"unknownLanguage":0,"unknownDate":6,"lawsuits":0,"regulatory":1,"minors":1,"coreRelations":6,"contextualRelations":0,"mixedRelations":0,"unknownRelations":0,"relationPending":0,"relationUnknown":0},"countingNote":"Distinct public cases in this selection. People counts apply within individual cases only; cross-case person overlap has not been resolved. No population incidence estimate.","affectedCountNote":"Interpret person counts with affectedCountStatus and the reported effects. Unquantified zeros are placeholders, not a measured zero.","source":"AI incidents","publisher":"NOPE","url":"https://nope.net/incidents","license":"CC BY 4.0"},"incidents":[{"id":"2026-coding-agent-restored-server-file-from-two-week-old-archive-undoing-security-fixes-and-moderation-layer-first-person","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'I had asked it to revert some wording it had changed in a privacy policy. To do that it looked around the project, found a `.tar.gz` in the root, and copied `server.js` out of it'; 'the archive was a snapshot from two weeks earlier, and the filename gave no hint of that'; 'It reported success'","relation":"supports","source_id":"s1"}],"assertion":"The poster says an agent, asked to revert wording in a privacy policy, copied server.js out of a .tar.gz archive in the project root that was a two-week-old snapshot, and reported success.","causal_attribution":"Poster's account; the agent's command is described from the session transcript the poster read."},{"id":"c2","status":"reported","evidence":[{"locator":"'That one `cp` took out four verified security fixes and an entire moderation API layer. The fixes were ones the *same agent* had written, tested and deployed about forty minutes earlier in the same session'; 'Nothing was in git. I found out two days later when an endpoint returned 404 that should not have'","relation":"supports","source_id":"s1"}],"assertion":"The poster says the copy removed four verified security fixes, which the same agent had written, tested and deployed about forty minutes earlier, and an entire moderation API layer, that nothing was in git, and that the loss was found two days later when an endpoint returned 404.","causal_attribution":"Poster's account of the loss and its discovery."},{"id":"c3","status":"reported","evidence":[{"locator":"'The lost code was sitting in those transcripts as tool-call arguments. I reconstructed the moderation layer from one and confirmed the timeline from the other, including the exact command that did the damage, timestamped'; 'All four were live again for two days and nobody knew'","relation":"supports","source_id":"s1"}],"assertion":"The poster says the lost code was reconstructed from the agents' session transcripts, where it sat as tool-call arguments, and that the four problems the fixes had closed were, in the poster's words, 'live again for two days and nobody knew'.","causal_attribution":"Poster's account of the recovery."},{"id":"c4","status":"reported","evidence":[{"locator":"'My Claude quota runs out most days and the ChatGPT subscription sits idle, so handing the heavy reading to Codex is genuinely useful'; 'I shipped it, so it’s mine'; 'The failure was not an agent writing something bad, it was an agent reverting something good with nothing in place to notice'","relation":"supports","source_id":"s1"}],"assertion":"The poster runs Claude Code and OpenAI Codex together, does not say which agent ran the copy, and in a reply accepts responsibility for shipping without git or tests.","causal_attribution":"Poster's own statements; the acting agent is not identified in the post or the reply."}],"effects":[{"label":"Coding agent restored a two-week-old file and silently removed deployed security fixes and a moderation layer (poster's account)","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.reddit.com/r/ClaudeCode/comments/1x10ck6/an_agent_restored_a_file_from_a_twoweekold/","kind":"forum_post","access":"read","language":"en","translation_note":"Read in English on 2026-10-09: full self-text and the 4 comments retrieved through the arctic_shift archive API by post ID, one of them the poster's reply. The poster handle is not recorded.","independence_group":"reddit-claudecode-archive-restore-poster"}],"version":1,"ai_roles":["own_use"],"contexts":["work"],"unknowns":["Which agent, Claude Code or Codex, ran the copy; the post names both as in use.","The model and agent versions.","When the restore happened; the post of 8 October 2026 says the loss was found two days after it.","The service and its users, and whether anyone exploited the two-day absence of the fixes.","The poster's country."],"geography":{"basis":"No source states where the poster or the service is. No court proceedings.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"Published under the public-forum rule as a concrete first-person account of a coding agent restoring a stale file and silently removing deployed security fixes and a moderation layer, with the restore, the loss, the two-day exposure and the recovery attributed to the poster. The acting agent is recorded as unidentified because the post names two agents in use without saying which ran the copy. The poster's handle, the service and the poster's GitHub account are not named.","reviewed_on":"2026-10-09"},"ai_involvement":{"basis":"The poster states that a coding agent, acting on a request to revert wording in a privacy policy, copied server.js out of a two-week-old archive and reported success, and that this copy removed four deployed security fixes, which the agent had itself written, tested and deployed about forty minutes earlier, and a moderation API layer; the poster says the exact command was later found, timestamped, in the agent's session transcript. The agent's copy is the described action and the overwritten, two-day-absent code is its described consequence. Which of the poster's two agents (Claude Code or Codex) ran the copy is not stated. The account is the poster's own and is uncorroborated.","status":"reported"},"person_relations":["acted_on_behalf"]},"name":"Developer says a coding agent restored a file from a two-week-old archive, silently undoing four security fixes and a moderation layer (first-person)","summary":"In a public post to r/ClaudeCode created on 8 October 2026, a developer who runs Claude Code and OpenAI's Codex together writes that an agent, asked to revert some wording it had changed in a privacy policy, found a .tar.gz archive in the project root and copied server.js out of it. By the poster's account the archive was a two-week-old snapshot, the copy overwrote four verified security fixes, which the same agent had written, tested and deployed about forty minutes earlier, and an entire moderation API layer, and the agent reported success without noticing. Nothing was in git. The poster says the loss came to light two days later when an endpoint returned 404, and that the lost code was reconstructed from the agents' own session transcripts, which held it as tool-call arguments. The post does not say which of the two agents ran the copy. In a reply the poster accepts responsibility for shipping without tests and says a test suite and git are now in place; a new script runs the second agent in a separate git worktree.","incidentKind":"single_event","incidentDatePrecision":"unknown","exposurePattern":"single_interaction","reportedDate":"2026-10-08","aiSystem":"One of the two coding agents the poster runs together, Claude Code and OpenAI Codex; the post does not say which one copied server.js out of the two-week-old archive","aiProduct":"Unidentified coding agent","severity":"low","verificationStatus":"unverified","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"The poster says an agent's file restore silently removed four deployed security fixes and a moderation API layer from a live service for two days and cost a fortnight of work, later reconstructed from session transcripts (first-person account, uncorroborated).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":1,"otherPeopleHarmedMin":0,"affectedCountStatus":"exact","affectedCountEvidence":"One person counted: the poster, whose deployed work the agent overwrote. Users of the service during the two days the fixes were absent are not described as harmed and are not counted.","victimAgeRange":"adult","platformType":"agent","outcomeStatus":"resolved","primarySourceUrl":"https://www.reddit.com/r/ClaudeCode/comments/1x10ck6/an_agent_restored_a_file_from_a_twoweekold/","primarySourceLabel":"r/ClaudeCode, 8 October 2026: \"An agent restored a file from a two-week-old archive and silently deleted a fortnight of work\"","firstPublishedAt":"2026-10-09T03:41:31.588063+00:00","updatedAt":"2026-10-09T03:41:31.588063+00:00","scopeVersion":"facts-v3","tags":["first-person","reddit","coding-agent","data-loss","security","archive-restore","claude-code","codex"]},{"id":"2026-murcia-ai-real-time-face-modification-forged-dni-video-checks-electronic-signature-certificates","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'El investigado aparecía personalmente en los vídeos de verificación de la empresa mostrando el DNI falsificado mientras que, gracias a la inteligencia artificial, su rostro en pantalla se modificaba en tiempo real para ser idéntico al de la fotografía del documento. De este modo realizó 38 intentos sobre más de 30 identidades de ciudadanos reales.'","relation":"supports","source_id":"s1"},{"locator":"'Durante las videoconferencias de verificación, aparecía físicamente ante la cámara, mientras un programa modificaba sus facciones en tiempo real para que coincidieran con las de la persona cuya identidad estaba suplantando.'","relation":"supports","source_id":"s2"},{"locator":"'The unnamed man allegedly made 38 attempts to impersonate 30 people and obtain digital certificates in their names, succeeding on multiple occasions.'","relation":"supports","source_id":"s3"}],"assertion":"Police say the suspect appeared in an electronic-certificate company's verification videos showing forged DNI cards while AI software modified the suspect's face in real time to match the photo on the forged document and the features of the person being impersonated, making 38 attempts on more than 30 identities of real citizens.","causal_attribution":"Police allegation in a press release; untested in court."},{"id":"c2","status":"reported","evidence":[{"locator":"'logrando suplantar la identidad de múltiples víctimas.'","relation":"supports","source_id":"s1"},{"locator":"'con el objetivo final de conseguir firmas digitales autorizadas que posteriormente pudieran ser utilizadas para cometer estafas económicas.'","relation":"supports","source_id":"s2"},{"locator":"'Police did not say how many of the 38 attempts succeeded, only that certificates were issued on \"multiple\" occasions.'","relation":"supports","source_id":"s3"}],"assertion":"Police say the suspect succeeded in impersonating multiple victims, with the final aim of obtaining authorised digital signatures for later economic scams; they did not say how many attempts succeeded.","causal_attribution":"Police statement; no later fraud using the certificates is reported."},{"id":"c3","status":"reported","evidence":[{"locator":"'Durante apenas un segundo, la máscara digital de su víctima desapareció de la pantalla, dejando al descubierto el rostro real del sospechoso ante el personal de seguridad de la entidad emisora.'; 'culminando con la detención del investigado como presunto responsable de un delito continuado de falsedad documental en documento oficial.'","relation":"supports","source_id":"s1"},{"locator":"'A search of his home yielded a laptop protected by high-grade encryption, several mobile phones, storage devices, and documents, according to police.'","relation":"supports","source_id":"s3"}],"assertion":"During one live video identification the face-modification program lagged and for about a second the victim's digital mask disappeared, exposing the suspect's real face to the issuer's security staff; police then arrested the suspect as the alleged perpetrator of a continuing offence of falsifying official documents and seized an encrypted laptop, phones and storage devices.","causal_attribution":"Police account of the detection and arrest."},{"id":"c4","status":"reported","evidence":[{"locator":"'Los agentes identificaron más de 320 líneas telefónicas asociadas a 24 dispositivos móviles distintos. La mayoría de estas líneas habían sido contratadas utilizando identidades suplantadas y adquiridas en puntos de venta localizados en Murcia.'","relation":"supports","source_id":"s2"}],"assertion":"Investigators identified more than 320 phone lines on 24 mobile devices, most contracted with impersonated identities and bought at points of sale in Murcia.","causal_attribution":"Police statement; the phone lines are not described as involving AI."}],"effects":[{"label":"identities of more than 30 real citizens used on forged ID cards and impersonated with real-time AI face modification to apply for signature certificates","claim_id":"c1","direction":"negative"},{"label":"police say the impersonation succeeded for multiple victims","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.h50.es/la-policia-nacional-detiene-a-un-ciberdelincuente-que-utilizaba-una-tecnica-pionera-mediante-ia-para-obtener-certificados-de-firma-electronica/","kind":"news_report","access":"read","language":"es","translation_note":"Read live in Spanish on 2026-10-02 (h50 Digital Policial, 11 August 2026); the text reproduces the Policía Nacional release. Researcher translation.","independence_group":"policia-nacional-release-2026-08-11"},{"id":"s2","url":"https://www.la7tv.es/articulo/sucesos/detenido-murcia-ciberdelincuente-que-usaba-ia-obtener-certificados-digitales/20260811095847072087.html","kind":"news_report","access":"read","language":"es","translation_note":"Read live in Spanish on 2026-10-02 (La 7 TV Región de Murcia, 11 August 2026); a rewrite of the same police release. Researcher translation.","independence_group":"policia-nacional-release-2026-08-11"},{"id":"s3","url":"https://www.theregister.com/security/2026/08/11/deepfake-hiccup-unmasks-suspected-digital-certificate-fraudster/5285934","kind":"news_report","access":"read","language":"en","translation_note":"Read live in English on 2026-10-02 (The Register, 11 August 2026); summarises the police release and quotes it in machine translation.","independence_group":"policia-nacional-release-2026-08-11"}],"version":1,"ai_roles":["others_use"],"contexts":["privacy","finance"],"unknowns":["When the attempts took place and when the arrest was made; the police release is dated 11 August 2026.","How many certificates were issued and whether any was used in a later fraud.","Which face-modification program was used.","Where the issuing company is based and where the impersonated citizens live.","Any charge decision or court proceeding."],"geography":{"basis":"Policía Nacional arrested the suspect in Murcia, and most of the more than 320 phone lines were bought at points of sale in Murcia. The issuing company's location is not stated in the inspected bodies, and the residence of the impersonated citizens is not stated (a DNI is not used to infer residence). No court proceeding is reported.","court_countries":[],"event_countries":["ES"],"affected_person_countries":[]},"publication":{"basis":"Published as a core case (depicted_or_impersonated): police say a suspect used real-time AI face modification in video identity checks to impersonate more than 30 real citizens on forged ID cards, succeeding for multiple victims. One police chain (Policía Nacional release) read in Spanish via h50 and La 7 TV and in English via The Register; every claim is reported. The suspect and the impersonated citizens are not named. Event date unknown; reported 11 August 2026.","reviewed_on":"2026-10-02"},"ai_involvement":{"basis":"Policía Nacional states that the suspect used artificial intelligence to modify the suspect's face in real time during video identity checks so that it matched the photo on forged DNI cards, combined with deepfake techniques; police call the AI-altered face 'la máscara digital de su víctima'. The tool is not named and the videos were not inspected. The allegation is untested in court. The AI output impersonated the real citizens (depicted_or_impersonated).","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Spanish police arrest a man in Murcia suspected of using real-time AI face modification and forged ID cards to impersonate more than 30 real people in video identity checks for electronic signature certificates","summary":"Spain's Policía Nacional said on 11 August 2026 that it had arrested in Murcia a suspect who tried to obtain electronic signature certificates in other people's names from a company that issues them. During the company's video identity checks the suspect appeared on camera holding a forged DNI identity card while AI software modified the suspect's face in real time to match the photo on the forged document. Police say the suspect made 38 attempts using the identities of more than 30 real citizens and succeeded in impersonating multiple victims, aiming to use the signatures for later scams. A short processing delay in the face-modification software made the digital mask disappear for barely a second, exposing the suspect's real face to the issuer's security staff.","incidentKind":"bounded_series","incidentDatePrecision":"unknown","exposurePattern":"unknown","reportedDate":"2026-08-11","aiSystem":"AI software that modified the suspect's face in real time during live video identity checks to match the photo on forged DNI cards, described by police as deepfake techniques; the program is not named","aiProduct":"Unidentified video tool","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["other_material_harm"],"harmOutcomeSummary":"Police say the identities of more than 30 real citizens were used on forged ID cards and impersonated with real-time AI face modification in 38 attempts to obtain electronic signature certificates, succeeding for multiple victims (Policía Nacional release via h50 and La 7 TV; The Register).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":30,"affectedCountStatus":"documented_minimum","affectedCountEvidence":"The Policía Nacional release (h50; La 7 TV) says the suspect, showing a forged DNI while AI altered the suspect's face on camera, 'De este modo realizó 38 intentos sobre más de 30 identidades de ciudadanos reales': each of these real citizens had their identity placed on a forged DNI and impersonated in a live video check, and the release calls the person impersonated in the attempt that failed 'su víctima'. Documented minimum 30 (more than 30). The count is of people whose identities were used, not of issued certificates: impersonation succeeded for 'múltiples víctimas', a number police did not give (The Register). The certificate-issuing company and the people whose identities were used for the 320 phone lines are not counted (the phone-line identities are not tied to the AI use).","victimAgeRange":"unknown","jurisdiction":"ES","platformType":"other","outcomeType":"investigation_opened","outcomeStatus":"ongoing","primarySourceUrl":"https://www.h50.es/la-policia-nacional-detiene-a-un-ciberdelincuente-que-utilizaba-una-tecnica-pionera-mediante-ia-para-obtener-certificados-de-firma-electronica/","primarySourceLabel":"h50 Digital Policial, 11 August 2026: La Policía Nacional detiene en Murcia a un ciberdelincuente que utilizaba una técnica pionera mediante IA","firstPublishedAt":"2026-10-02T03:25:55.932181+00:00","updatedAt":"2026-10-02T03:25:55.932181+00:00","scopeVersion":"facts-v3","tags":["deepfakes","identity-impersonation","identity-verification-bypass","electronic-signature","arrest","spanish-language"]},{"id":"2025-montreal-icu-chief-francois-marquis-ai-deepfake-ads-scam-victim-icu","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'he said there has been a proliferation of artificial intelligence (AI) generated deepfakes on people’s social media feeds.'; 'It’s all people calling me and telling me there’s some deepfakes, you know, running around.'; 'he’s talking about joint pain and selling supplements. But more seriously, he said he’s seen videos where he is peddling cures for cancer and anti-pharmaceutical propaganda.'","relation":"supports","source_id":"s1"},{"locator":"'Marquis said he was in disbelief when he first learned his image was being used in a deepfake video.'; 'He received phone calls from people saying \"you're all over Facebook,\"'","relation":"supports","source_id":"s2"},{"locator":"'said he's heard from multiple patients and colleagues that videos featuring his likeness — all selling a range of pills or products — keep popping up on Facebook.'; 'referring to the latest AI-generated ad.'","relation":"supports","source_id":"s3"}],"assertion":"Dr. François Marquis, chief of intensive care at Montreal's Maisonneuve-Rosemont Hospital, says AI-generated deepfake videos using his likeness have circulated on Facebook since at least August 2025, selling joint supplements, pills and cancer cures and spreading anti-pharmaceutical claims; he learns of them from people who call him because he is not on social media.","causal_attribution":"The doctor's own account in three interviews (CBC 2025, CTV and CBC 2026); no inspected source reproduces or analyses a video."},{"id":"c2","status":"reported","evidence":[{"locator":"'This poor man actually ended up, you know, barging in the ICU and he wanted his money back because he never received the drugs,'","relation":"supports","source_id":"s1"},{"locator":"'after a person who was taken for a few hundred dollars in an online scam showed up at the hospital demanding his money back.'","relation":"supports","source_id":"s2"},{"locator":"'Marquis recalled a victim of one deepfake scam who came looking for him in the ICU, wanting his money back for pills that were never delivered.'; 'that person invested hundreds of dollars in those pills and never received anything,'","relation":"supports","source_id":"s3"}],"assertion":"A person who paid hundreds of dollars for pills advertised in one of the deepfakes, and never received them, came to the hospital and into the ICU demanding his money back from Dr. Marquis.","causal_attribution":"Recounted by Dr. Marquis in each interview; the person is not identified and did not speak to the outlets. The three accounts appear to describe the same visit, but no source confirms that."},{"id":"c3","status":"reported","evidence":[{"locator":"'has reported the deepfakes to Quebec’s College of Physicians and Montreal police, but he said there is little else he can do to make these videos stop, except speaking out about them.'","relation":"supports","source_id":"s1"},{"locator":"'he routinely struggles to get deepfake videos taken down before new ones pop back up — even though he's flagged them to social media platforms, Quebec's medical college and the police.'","relation":"supports","source_id":"s3"},{"locator":"'Basically I was told that there's nothing they can really do,'","relation":"supports","source_id":"s3"}],"assertion":"Dr. Marquis has reported the deepfakes to the Collège des médecins du Québec, Montreal police and social media platforms, but says new videos keep appearing and there is little he can do to stop them.","causal_attribution":"The doctor's account; he says he was told 'there's nothing they can really do', and no statement from the platforms, police or the college is reported."},{"id":"c4","status":"reported","evidence":[{"locator":"'now it's about the security of the people in the hospital,'; 'The other problem is that some people will actually stop taking their usual medication to take this fake drug,'","relation":"supports","source_id":"s2"}],"assertion":"He says the visit by the scam victim raised a security concern for people in the hospital, and that some people may stop their usual medication for fake drugs.","causal_attribution":"The doctor's stated concern; no patient who stopped treatment because of these videos is described."}],"effects":[{"label":"his face and voice used in AI-generated deepfake ads selling supplements, cancer cures and anti-pharmaceutical claims on Facebook","claim_id":"c1","direction":"negative"},{"label":"a person who paid hundreds of dollars for pills advertised in one of the deepfakes never received them and came to the ICU demanding his money back","claim_id":"c2","direction":"negative"},{"label":"reports to the medical college, police and platforms have not stopped the videos","claim_id":"c3","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.ctvnews.ca/montreal/article/deepfakes-of-well-known-montreal-doctor-raising-alarm/","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-10-01 from the live CTV News page (18 September 2026); article text from the page JSON-LD articleBody. Interview with Dr. Marquis.","independence_group":"marquis-own-account"},{"id":"s2","url":"https://www.cbc.ca/news/canada/montreal/quebec-doctors-deepfake-scams-warning-1.7599117","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-10-01 from the live CBC News page (1 August 2025, updated 4 August 2025). Interview with Dr. Marquis and another Quebec physician.","independence_group":"marquis-own-account"},{"id":"s3","url":"https://ca.news.yahoo.com/deepfake-doctors-peddling-bogus-cures-080000588.html","kind":"news_report","access":"read","language":"en","translation_note":"Read on 2026-10-01 from the Yahoo News Canada copy of a CBC News feature (18 September 2026). Interview with Dr. Marquis and other physicians.","independence_group":"marquis-own-account"}],"version":1,"ai_roles":["others_use"],"contexts":["health","work","finance"],"unknowns":["Who made and paid for the ads, which AI tool was used, and how many videos exist.","Whether the ICU visit described in 2025 and in 2026 is the same event, and how many people bought products from the ads.","Whether Meta removed any of the reported ads, and the outcome of the police and medical-college reports.","When the first deepfake appeared (before August 2025)."],"geography":{"basis":"Dr. Marquis is chief of intensive care at Maisonneuve-Rosemont Hospital in Montreal, where the scam victim confronted him (CTV, CBC). The ads circulate on Facebook and their origin is not stated, so the event country is left unknown.","court_countries":[],"event_countries":[],"affected_person_countries":["CA"]},"publication":{"basis":"Published as a core case (depicted_or_impersonated): a named Montreal ICU chief, a public figure speaking on record to CBC and CTV, says AI deepfake ads using his likeness have sold supplements and cures on Facebook since at least August 2025, and that a scam victim who paid hundreds of dollars for undelivered pills confronted him in the ICU. The account rests on his own interviews; the ads' makers are unknown. The scam victim is not identified.","reviewed_on":"2026-10-01"},"ai_involvement":{"basis":"Dr. Marquis describes the videos as AI-generated deepfakes using his likeness (CTV News 2026; CBC 2025 and 2026), and CBC calls the latest one an AI-generated ad. No inspected source names the tool, the advertiser or who made the videos, and the doctor says he is not on social media and learns of the videos from people who call him.","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Montreal: Dr. François Marquis, chief of intensive care at Maisonneuve-Rosemont Hospital, says AI deepfake ads using his face have sold supplements and cancer cures on Facebook since at least August 2025, and that a scam victim who paid hundreds of dollars for pills that never arrived came to the ICU demanding a refund","summary":"Dr. François Marquis, chief of intensive care at Maisonneuve-Rosemont Hospital in Montreal, told CBC News (August 2025) and CTV News and CBC News (September 2026) that AI-generated deepfake videos using his likeness keep appearing on Facebook, selling joint supplements, pills and cancer cures and spreading anti-pharmaceutical claims; the latest offers $1 million to dissatisfied customers. He is not on social media and learns of the videos from people who call him. He recounts that a person who paid hundreds of dollars for pills advertised in one of the videos, and never received them, came into the ICU demanding his money back, which he describes as a security problem for the hospital. He has reported the deepfakes to Quebec's College of Physicians, Montreal police and the platforms, but says new videos keep appearing. The makers of the ads are not identified.","incidentKind":"ongoing_experience","incidentDatePrecision":"unknown","exposurePattern":"repeated_interactions","reportedDate":"2025-08-01","aiSystem":"AI-generated deepfake video ads using Dr. Marquis's face and voice, circulated on Facebook (his account to CBC and CTV); no tool or advertiser is named","aiProduct":"Unidentified video tool","severity":"low","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["reputational_harm","financial_loss"],"harmOutcomeSummary":"Dr. Marquis says AI deepfake ads falsely show him selling supplements and cures and spreading anti-pharmaceutical claims, and that one person lost hundreds of dollars on pills that never arrived and confronted him in the ICU (his account to CBC and CTV).","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":2,"affectedCountStatus":"documented_minimum","affectedCountEvidence":"Dr. Marquis, whose likeness is used, and one person who paid hundreds of dollars for undelivered pills and came to the ICU (counted once; the 2025 and 2026 accounts appear to describe the same visit). The doctor says other people lose money but gives no number. Documented minimum 2.","victimAgeRange":"adult","jurisdiction":"CA-QC","platformType":"other","outcomeType":"media_coverage","outcomeStatus":"ongoing","primarySourceUrl":"https://www.ctvnews.ca/montreal/article/deepfakes-of-well-known-montreal-doctor-raising-alarm/","primarySourceLabel":"CTV News, 18 September 2026: Deepfakes of well-known Montreal doctor raising alarm","firstPublishedAt":"2026-10-01T03:18:04.682437+00:00","updatedAt":"2026-10-01T03:18:04.682437+00:00","scopeVersion":"facts-v3","tags":["deepfake","doctor-impersonation","health-scam","facebook-ads","montreal","quebec","depicted-or-impersonated"]},{"id":"2025-adviser-reports-client-ai-romance-photo-bitcoin-loss","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"Attached screenshot, pasted message from the scammer (agent transcription): 'am not the person you see in pictures it's AI and other people pictures'","relation":"supports","source_id":"s3"},{"locator":"Body: 'Michael added that after the money was transferred, the scammer admitted that the photos used during their conversations were fake and created with artificial intelligence (AI) tools.'","relation":"supports","source_id":"s1"}],"assertion":"The scammer's message to the client, shown in the screenshot the adviser posted, said that this was not real and that she was 'not the person you see in pictures', the pictures being AI and other people's pictures; BitDegree relays this as an admission that the photos were AI-created.","causal_attribution":"All three sources carry the adviser's own post and the screenshot he attached; they form one reporting chain, so the claim stays reported. Causation is alleged by the adviser and the client; no payment record, image or police report was inspected."},{"id":"c2","status":"reported","evidence":[{"locator":"Post text: 'who just lost all his Bitcoin' and 'He finally made it to 1 BTC.'; attached screenshot, message from the client (agent transcription): 'I paid for a ticket to meet her and her family in California for December 26'; full post text: 'I had numerous phone calls (hours!) and a string of text messages with him because he refused to believe me' and '(he bought her a plane ticket)'","relation":"supports","source_id":"s3"},{"locator":"Body: 'According to Michael, his client sent all of his Bitcoin to someone pretending to be a trader.'; 'Michael explained that he tried several times to stop his client from making the transfer.'; 'In addition to losing his Bitcoin retirement savings, the man also bought a plane ticket for the person he believed he would meet.'","relation":"supports","source_id":"s1"},{"locator":"Body: 'lost his entire retirement fund, one full Bitcoin'","relation":"supports","source_id":"s2"}],"assertion":"The client, who had recently reached one bitcoin, sent all of it to someone posing as a trader and romantic partner despite the adviser's repeated warnings; he wrote that his retirement funds were gone and that he had paid for a ticket to meet her and her family on 26 December.","causal_attribution":"All three sources carry the adviser's own post and the screenshot he attached; they form one reporting chain, so the claim stays reported. Causation is alleged by the adviser and the client; no payment record, image or police report was inspected."},{"id":"c3","status":"reported","evidence":[{"locator":"Body: 'The case was described by Terence Michael, an author from The Bitcoin Adviser, in a post shared on X.'","relation":"supports","source_id":"s1"},{"locator":"Body: 'His story, shared by Bitcoin security adviser Terence Michael'","relation":"supports","source_id":"s2"},{"locator":"Post text: 'I have a Bitcoin client' (created 2025-12-14T16:21:50Z per the syndication record)","relation":"supports","source_id":"s3"}],"assertion":"The adviser's X post of 14 December 2025 is the original account; BitDegree and the Cointelegraph explainer relay it.","causal_attribution":"Established by the relays' own attribution and the post's syndication record; the relays add no independent account."}],"effects":[{"label":"Adviser-reported loss of a client's bitcoin retirement savings","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.bitdegree.org/crypto/news/pig-butchering-scam-wipes-out-bitcoin-investors-retirement-account","kind":"news_relay_of_social_post","access":"read","language":"en","translation_note":"","independence_group":"terence-michael-client-account"},{"id":"s2","url":"https://www.tradingview.com/news/cointelegraph:9a94bab77094b:0-how-an-ai-fueled-romance-scam-drained-a-bitcoin-retirement-fund/","kind":"explainer_article","access":"read","language":"en","translation_note":"","independence_group":"terence-michael-client-account"},{"id":"s3","url":"https://x.com/ProofOfMoney/status/2000239818522120370","kind":"first_person_social_post","access":"read","language":"en","translation_note":"Read on 2026-10-07: the X syndication endpoint (HTTP 200) returned only the first 280 characters of this long-form post; the full text was read through the fxtwitter API mirror (HTTP 200, bodies/verify-upd-adviser-xpost-fx.json). The attached screenshot of the client's message and the scammer's message was transcribed from the image by the research agent (an AI). The client's first name appears in the screenshot and is not reproduced.","independence_group":"terence-michael-client-account"}],"version":1,"ai_roles":["others_use"],"contexts":["finance","relationships"],"unknowns":["The client's location, the scam's start date, the generation tool and the exact value lost beyond the adviser's 'all his Bitcoin' and '1 BTC' are unknown.","The persona's pictures and the payment records were not inspected; the scammer's message is known only through the screenshot the adviser posted.","The Cointelegraph explainer's statement about real-time deepfake video calls is not in the adviser's post and is not established.","Whether the client reported the loss to police or recovered anything is not reported."],"geography":{"basis":"The adviser's post and the relays do not say where the client or the scammer lived or where the exchanges took place. The ticket's destination (California) does not establish the client's residence. Countries remain unknown.","court_countries":[],"event_countries":[],"affected_person_countries":[]},"publication":{"basis":"A first-person account by a named adviser, read in his X post with the attached screenshot, describes a concrete financial loss by one client connected to a romance persona whose pictures the scammer said were AI-made. Two relays repeat the post and add no independent support. All claims stay reported, the client is not named, the amount is given as the adviser states it (one bitcoin), and the location, dates and tools remain unknown.","reviewed_on":"2026-10-07"},"ai_involvement":{"basis":"The scammer's own message to the client, shown in the screenshot the adviser attached to his X post, states that the persona's pictures were AI and other people's pictures. The client wrote in the same screenshot that the woman he had been talking with did not exist, that he had paid for a ticket to meet her, and that his retirement funds were gone, and the adviser's post says the client lost all his bitcoin. The AI-generated pictures are the material that presented a non-existent woman to the client during the relationship through which he transferred his bitcoin. The tool is unnamed, the pictures were not inspected, and the Cointelegraph explainer's description of live deepfake video calls is not supported by the post.","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Bitcoin adviser reports a client lost his retirement savings to a romance scam; the scammer's message said the persona's pictures were AI-made","summary":"Bitcoin security adviser Terence Michael wrote on X on 14 December 2025 that a client who had recently reached one bitcoin had lost all of it to a 'pig butchering' romance and trading scam. A screenshot attached to the post shows the client telling the adviser that the woman he had been talking with did not exist, that he had paid for a ticket to meet her and her family on 26 December, and that his retirement funds and family savings were gone. The screenshot also shows the scammer's message to the client saying that this was not real, that she was not the person in the pictures, that the pictures were AI and other people's pictures, and that no funds could be withdrawn. BitDegree (15 December 2025) and a Cointelegraph explainer (31 December 2025) relay the adviser's account; the adviser said he had tried several times to stop the transfers. The client's identity and location, the scam's start date and the tools used are unknown. The Cointelegraph explainer's description of live deepfake video calls does not appear in the adviser's post and is not established.","incidentKind":"single_event","incidentDatePrecision":"unknown","exposurePattern":"unknown","reportedDate":"2025-12-14","aiSystem":"AI-generated pictures of a romance-scam persona (per the scammer's message relayed in the adviser's post)","aiProduct":"Unidentified image tool","aiCompany":"Unknown","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["financial_loss"],"harmOutcomeSummary":"Adviser-reported loss of a client's Bitcoin retirement savings","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"documented_minimum","affectedCountEvidence":"The adviser's post and the attached screenshot describe one client who lost all his bitcoin and his retirement funds. The adviser is the reporter, not a harmed person; the family members mentioned in the screenshot are not counted.","victimAgeRange":"adult","platformType":"other","primarySourceUrl":"https://www.bitdegree.org/crypto/news/pig-butchering-scam-wipes-out-bitcoin-investors-retirement-account","primarySourceLabel":"BitDegree, 15 December 2025: relay of the adviser's X post about the client's loss","firstPublishedAt":"2026-09-30T01:11:16.25973+00:00","updatedAt":"2026-10-07T03:25:14.223863+00:00","scopeVersion":"facts-v3","tags":[]},{"id":"2026-livingston-parish-louisiana-arrest-in-extortion-case-involving-reported-ai-nude-photos-and-videos","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"one person was being threatened with rape and other bodily harm unless they paid money","relation":"supports","source_id":"s1"},{"locator":"AI-generated photos and videos of one of the victims were also sent to numerous family members and friends","relation":"supports","source_id":"s1"},{"locator":"AI generated photos and videos were created of one of the victims and were sent out to numerous family members and friends","relation":"supports","source_id":"s2"},{"locator":"assigned to assist in an investigation into threats made by phone and online","relation":"supports","source_id":"s3"}],"assertion":"The Livingston Parish Sheriff's Office said an investigation into threats made by phone and online involved one alleged victim being threatened with rape and other bodily harm unless money was paid, and AI-generated photos and videos of one of the victims being sent to numerous family members and friends.","causal_attribution":"The sheriff's office statement as relayed by three outlets. No victim account, court record or image was inspected. The sheriff's office attributes the creation and sending of this material to the accused."},{"id":"c2","status":"reported","evidence":[{"locator":"more threats were sent to the victims, now threatening to get one of the victim’s employments terminated","relation":"supports","source_id":"s2"},{"locator":"eventually including a threat to get one victim fired","relation":"supports","source_id":"s3"}],"assertion":"The sheriff's office said that later threats to the victims included a threat to get one victim's employment terminated.","causal_attribution":"The sheriff's office statement as relayed by two outlets. The sources do not say whether the threat was carried out."},{"id":"c3","status":"reported","evidence":[{"locator":"search results and subpoenas from platforms used to send the threats pointed back to","relation":"supports","source_id":"s1"},{"locator":"search returns and subpoenas from certain suspect platforms used to make these harassing messages and threats started coming back","relation":"supports","source_id":"s2"},{"locator":"made all the fictitious accounts, AI-generated nude photos/videos, rape threats, and extortion attempts","relation":"supports","source_id":"s2"},{"locator":"created the fake accounts, the AI-generated nude photos and videos, the rape threats, and the demands for money that she and another person had reported as victims","relation":"supports","source_id":"s3"}],"assertion":"The sheriff's office said that subpoenas and search returns from the platforms used to send the messages led back to the woman first believed to be a victim, and that, after an interview with the woman, the sheriff's office learned the woman was the person who made all of the fictitious accounts, the AI-generated nude photos and videos, the rape threats and the extortion attempts.","causal_attribution":"The sheriff's office account of its investigation and of an interview, relayed by three outlets. The accused's own account of the interview is not reported, no court finding is reported and the sheriff's office said future charges may be pending. The accusation is an allegation."},{"id":"c4","status":"reported","evidence":[{"locator":"was booked into the Livingston Parish Detention Center on one count each of unlawful dissemination of AI nude photos, online impersonation and injuring public record, along with five counts of extortion and one count of domestic stalking","relation":"supports","source_id":"s1"},{"locator":"has since been released on a $150,000 bond","relation":"supports","source_id":"s1"},{"locator":"Unlawful dissemination of AI nude photos (1 count)","relation":"supports","source_id":"s2"},{"locator":"Online impersonation (1 count)","relation":"supports","source_id":"s2"},{"locator":"Injuring public record (1 count)","relation":"supports","source_id":"s2"},{"locator":"Extortion (5 counts)","relation":"supports","source_id":"s2"},{"locator":"Domestic Stalking (1 count)","relation":"supports","source_id":"s2"},{"locator":"was booked into the Livingston Parish Detention Center on the following charges","relation":"supports","source_id":"s3"},{"locator":"One count, LRS 14:73.134, unlawful dissemination of AI nude photos","relation":"supports","source_id":"s3"},{"locator":"One count, LRS 14:73.10, online impersonation","relation":"supports","source_id":"s3"},{"locator":"One count, LRS 14:132, injuring public records","relation":"supports","source_id":"s3"},{"locator":"Five counts, LRS 14:66, extortion","relation":"supports","source_id":"s3"},{"locator":"One count, LRS 14:40.2, domestic stalking","relation":"supports","source_id":"s3"}],"assertion":"The accused was booked into the Livingston Parish Detention Center on charges that the three outlets list as one count each of unlawful dissemination of AI nude photos, online impersonation, injuring public record and domestic stalking, and five counts of extortion, and was released on a $150,000 bond.","causal_attribution":"The charges are reported by three outlets from one sheriff's office statement, so they are one chain. No booking record or charging document was inspected. The charges are allegations and the sheriff's office said future charges may be pending."},{"id":"c5","status":"reported","evidence":[{"locator":"allegations that overseas suspects were involved due to past relationships and acquaintances in Greece","relation":"supports","source_id":"s1"},{"locator":"Investigators brought in Homeland Security at one point over allegations that suspects overseas were involved, based on past relationships and acquaintances in Greece","relation":"supports","source_id":"s3"}],"assertion":"The sheriff's office said Homeland Security assisted the investigation because of allegations that overseas suspects were involved, based on past relationships and acquaintances in Greece.","causal_attribution":"The sheriff's office statement. The sources do not say any overseas suspect was identified, and the later finding attributes the material to the accused."},{"id":"c6","status":"reported","evidence":[{"locator":"created the fake accounts, the AI-generated nude photos and videos, the rape threats, and the demands for money that she and another person had reported as victims","relation":"supports","source_id":"s3"},{"locator":"that she and another person had reported as victims","relation":"supports","source_id":"s3"}],"assertion":"The Livingston Parish News wrote that detectives say the accused created the fake accounts, the AI-generated nude photos and videos, the rape threats and the demands for money that the accused and another person had reported as victims.","causal_attribution":"A single sentence in one outlet's rewrite of the sheriff's office statement. The clause saying the accused and another person had reported as victims can attach to the whole list or only to the demands for money, and the record does not choose between the two readings. WBRZ and WAFB do not repeat it, and no source says which reporter received the threats or was depicted."},{"id":"c7","status":"reported","evidence":[{"locator":"Anyone else who believes they were victimized in this case","relation":"supports","source_id":"s3"},{"locator":"The investigation is ongoing","relation":"supports","source_id":"s3"},{"locator":"This is an ongoing investigation","relation":"supports","source_id":"s2"}],"assertion":"The sheriff's office described the investigation as ongoing and asked anyone else who believes they were victimized in the case to contact it.","causal_attribution":"The sheriff's office request as relayed by the outlets. It does not report any further victim."}],"effects":[{"label":"One alleged victim reportedly threatened with rape and other bodily harm unless money was paid","claim_id":"c1","direction":"negative"},{"label":"AI-generated photos and videos of one of the victims reportedly sent to numerous family members and friends","claim_id":"c1","direction":"negative"},{"label":"Later reported threat to get one victim's employment terminated","claim_id":"c2","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.wbrz.com/news/marrero-woman-arrested-for-ai-nude-photos-extortion-after-deputies-initially-thought-she-was-victim/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"livingston-parish-sheriff-statement-2026-07-24"},{"id":"s2","url":"https://www.wafb.com/2026/07/24/woman-arrested-extortion-harassment-case-involving-ai-generated-photos/","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"livingston-parish-sheriff-statement-2026-07-24"},{"id":"s3","url":"https://www.livingstonparishnews.com/stories/woman-believed-to-be-one-of-the-victims-of-extortion-ai-nude-images-was-actually-behind-them,225313","kind":"news_report","access":"read","language":"en","translation_note":"","independence_group":"livingston-parish-sheriff-statement-2026-07-24"}],"version":1,"ai_roles":["others_use"],"contexts":["privacy","justice","everyday_life"],"unknowns":["The start date of the threats, the fictitious accounts and the sending of the material is not stated in any of the three outlets. Only the 24 July 2026 announcement is dated, so the event start is unknown and the case is published undated.","The Livingston Parish News says the case began when detectives with the Livingston Parish Internet Crimes Against Children Task Force were assigned to assist in the investigation. No source states the age of any victim, so it is not known whether any victim is a minor.","The victims are not identified or described. The sources do not say which of the people who reported as victims received the threats or was depicted, or whether the one other person who reported as a victim was harmed independently of the accused. The Livingston Parish News sentence that names the second reporter can be read as covering the whole list of material or only the demands for money.","The number of family members and friends who received the material is not stated (the sources say numerous), and whether any payment was made is not reported.","No AI tool is identified and no outlet reports examining the material. The description of the material as AI-generated is the sheriff's office statement.","The account of the interview is the sheriff's office's. The accused's own account is not reported, no court finding is reported, the sheriff's office said future charges may be pending, and the charges are allegations.","No overseas suspect is reported identified after the allegations about acquaintances in Greece.","The three outlets rest on one sheriff's office statement and none reports independent verification."],"geography":{"basis":"The Livingston Parish Sheriff's Office investigated the threats and the WAFB dateline reads LIVINGSTON PARISH, La. The sources do not state where the victims live or where the material was sent from. Greece appears only in allegations about unidentified overseas suspects and is not recorded as an event country. A judge set the bond but no court proceeding is described, so no court country is recorded.","court_countries":[],"event_countries":["US"],"affected_person_countries":[]},"publication":{"basis":"Three outlets rest on one Livingston Parish Sheriff's Office statement of 24 July 2026 (one independence group) and all claims are reported. The accused is a private person who has not been convicted and is not named or located by town. The victims are not named or described. No imagery is described beyond its kind. The reporting is thin on the victims' own experience and the case is recorded as the sheriff's office account. The sources do not state when the threats began, so the case is published undated and is outside the 2026 event-year lane.","reviewed_on":"2026-09-30"},"ai_involvement":{"basis":"The sheriff's office described the photos and videos as AI-generated, and the accused was booked for unlawful dissemination of AI nude photos. No outlet identifies an AI tool or reports that the material was examined. The description is one sheriff's office statement relayed by three outlets. The images were not seen by the reviewer.","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Livingston Parish, Louisiana: sheriff's office says a woman first treated as a victim made the AI-generated nude photos and videos, rape threats and extortion attempts in an online threats case","summary":"On 24 July 2026 WBRZ, WAFB and the Livingston Parish News relayed a Livingston Parish Sheriff's Office (Louisiana) statement about an investigation into threats made by phone and online. The sheriff's office said one alleged victim was threatened with rape and other bodily harm unless money was paid, AI-generated photos and videos of one of the victims were sent to numerous family members and friends, and later threats included getting one victim fired. Homeland Security assisted after allegations that overseas suspects were involved through past relationships and acquaintances in Greece. The sheriff's office said subpoenas and search returns from platforms led back to a woman who had first been treated as a victim, and that after an interview with the woman the sheriff's office learned the woman made all of the fictitious accounts, the AI-generated nude photos and videos, the rape threats and the extortion attempts. The accused was booked on charges that include unlawful dissemination of AI nude photos, online impersonation and five counts of extortion, and was released on bond. The Livingston Parish News says the accused and one other person had reported as victims some or all of what the sheriff's office attributes to the accused. The charges are allegations and no conviction is reported. The AI tool is not identified, the victims are not described and the start date of the threats is not stated.","incidentKind":"bounded_series","incidentDatePrecision":"unknown","exposurePattern":"unknown","reportedDate":"2026-07-24","aiSystem":"Unidentified AI photo and video generation tools (sheriff's office description)","aiProduct":"Unidentified image and video tool","severity":"medium","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["exploitation_or_abuse"],"harmOutcomeSummary":"The sheriff's office said one alleged victim was threatened with rape and other bodily harm unless money was paid, AI-generated photos and videos of one of the victims were sent to numerous family members and friends, and a later threat concerned getting one victim's employment terminated. The sheriff's office attributes all of this to the accused. No victim account is reported and the sources do not describe any effect on a victim.","frameworkFacets":[],"causationStatus":"alleged","participantUsersAffectedMin":0,"otherPeopleHarmedMin":1,"affectedCountStatus":"documented_minimum","affectedCountEvidence":"The Livingston Parish News says the accused and one other person had reported as victims some or all of what the sheriff's office attributes to the accused. The accused is not counted as harmed. The one other person is counted as a person reported as a victim, so the count is a lower bound of 1. The sources use the plural 'victims' without a number and do not say which reporter received the threats or was depicted. Family members and friends who received the material are not counted.","victimAgeRange":"unknown","platformType":"other","primarySourceUrl":"https://www.wbrz.com/news/marrero-woman-arrested-for-ai-nude-photos-extortion-after-deputies-initially-thought-she-was-victim/","primarySourceLabel":"WBRZ, relay of the Livingston Parish Sheriff's Office statement, 24 July 2026","firstPublishedAt":"2026-09-30T01:09:37.153049+00:00","updatedAt":"2026-09-30T01:44:23.541663+00:00","scopeVersion":"facts-v3","tags":[]},{"id":"2026-portland-tennessee-ai-child-faces-sexual-images-traded-canada-30-year-sentence","caseFacts":{"claims":[{"id":"c1","status":"reported","evidence":[{"locator":"'placed the faces of children onto images and videos of nude people and people engaged in sexual acts.'; 'Investigators said he then exchanged the AI-generated material with a Canadian resident for real child sexual abuse material.'","relation":"supports","source_id":"s1"},{"locator":"'had been placing the faces of children on nude individuals, as well as individuals who were engaging in sexual acts.'; 'would exchange the content with someone in Canada in exchange for real child sexual abuse material.'","relation":"supports","source_id":"s2"}],"assertion":"According to the district attorney's office, he used AI to place the faces of children onto images and videos of nude people and of people engaged in sexual acts, and exchanged the AI-generated material with a Canadian resident for real child sexual abuse material.","causal_attribution":"Prosecutors' account via one release; the source images, the children and the AI tool are not described."},{"id":"c2","status":"reported","evidence":[{"locator":"'Canadian authorities alerted U.S. law enforcement after arresting the person who'; 'charged with tampering with evidence after investigators alleged he deleted some material before officers entered his home to execute a search warrant.'","relation":"supports","source_id":"s1"},{"locator":"'was arrested in November 2025 after a joint investigation by Portland Police, the US Department of Homeland Security, the FBI and the Tennessee Bureau of Investigation.'","relation":"supports","source_id":"s3"}],"assertion":"Canadian authorities alerted US law enforcement after arresting the person he was communicating with; a joint investigation led to his arrest in November 2025, and he was also charged with tampering with evidence after investigators said he deleted material before officers entered his home.","causal_attribution":"DA release as relayed."},{"id":"c3","status":"reported","evidence":[{"locator":"'Judge Dee David Gay imposed the 30-year sentence, which the district attorney’s office said must be served without probation, parole or early release under Tennessee law.'","relation":"supports","source_id":"s1"},{"locator":"'On Thursday, Sept. 24, a judge sentenced'; 'to serve 30 years in the custody of the Tennessee Department of Correction'","relation":"supports","source_id":"s2"},{"locator":"'A Sumner County judge imposed the 30-year sentence Thursday.'","relation":"supports","source_id":"s4"}],"assertion":"A Sumner County Criminal Court judge sentenced him to 30 years in the Tennessee Department of Correction, to be served without probation, parole or early release.","causal_attribution":"DA release as relayed; WSMV gives the day as Friday, WKRN and WZTV as Thursday 24 September. The court record was not inspected."}],"effects":[{"label":"children's faces were placed onto AI-made sexual images and videos that were traded for real child sexual abuse material, according to prosecutors","claim_id":"c1","direction":"negative"}],"sources":[{"id":"s1","url":"https://www.wsmv.com/2026/09/25/middle-tennessee-man-sentenced-30-years-using-ai-create-trade-child-pornography/","kind":"local_tv_news","access":"read","language":"en","translation_note":"Read live on 2026-09-28 (WSMV, 25 September 2026). Relays the DA's release. WVLT carries the same Gray text.","independence_group":"sumner-county-da-release"},{"id":"s2","url":"https://www.yahoo.com/news/us/articles/portland-man-sentenced-using-ai-162610165.html","kind":"local_tv_news_syndicated_copy","access":"read","language":"en","translation_note":"Read live on 2026-09-28: Yahoo's syndicated copy of WKRN's report (25 September 2026); wkrn.com returned 403 to this host. Quotes the DA's release.","independence_group":"sumner-county-da-release"},{"id":"s3","url":"https://newschannel9.com/news/local/tennessee-sumner-county-man-gets-30-years-for-trading-ai-generated-child-abuse-images-with-canadian-man","kind":"local_tv_news","access":"read","language":"en","translation_note":"Read live on 2026-09-28: WZTV (FOX 17) report of 25 September 2026 as carried by sister station WTVC.","independence_group":"sumner-county-da-release"},{"id":"s4","url":"https://fox17.com/news/local/after-30-year-sentence-in-tn-ai-child-abuse-case-former-fbi-agent-warns-more-are-coming","kind":"local_tv_news","access":"read","language":"en","translation_note":"Read live on 2026-09-28 (WZTV/FOX 17, 26 September 2026). Case facts from the DA; adds a former FBI agent's general comments, not used as case evidence.","independence_group":"sumner-county-da-release"}],"version":1,"ai_roles":["others_use"],"contexts":["justice","privacy"],"unknowns":["Which offences he was convicted of, and whether by plea or at trial.","Which AI tool was used, where the children's images came from, and whether any depicted child has been identified or notified.","How many children's faces were used.","When the images were made and traded (the arrest was in November 2025).","The exact sentencing date (24 or 25 September 2026)."],"geography":{"basis":"He lived in Portland, Sumner County, Tennessee, where officers searched his home, and was sentenced in Sumner County Criminal Court. The other party was a Canadian resident arrested by Canadian authorities; where the exchanges took place beyond that is not stated. The children's countries are not reported.","court_countries":["US"],"event_countries":["US"],"affected_person_countries":[]},"publication":{"basis":"Published under the 2026-09-15 charter as a depiction case: prosecutors say AI was used to place the faces of children onto sexual images and videos that were traded internationally, and a court imposed a 30-year sentence. One DA release chain; all claims reported. The children are unidentified and uncounted, and the defendant is not named here.","reviewed_on":"2026-09-28"},"ai_involvement":{"basis":"The district attorney's release says he used artificial intelligence to place children's faces onto sexual images and videos (via WSMV, WKRN, WZTV). The tool, the source images and the identity of the children are not reported. The depicted_or_impersonated relation rests on the prosecutors' description of the faces of children being placed onto the images and videos.","status":"reported"},"person_relations":["depicted_or_impersonated"]},"name":"Portland, Tennessee: a man who prosecutors say used AI to put children's faces onto sexual images and videos and traded them with a Canadian resident for real child sexual abuse material was sentenced to 30 years in Sumner County in September 2026","summary":"The Sumner County (18th Judicial District) District Attorney's Office said a 30-year-old Portland, Tennessee man was sentenced in Sumner County Criminal Court in September 2026 to 30 years in the Tennessee Department of Correction, to be served without probation, parole or early release. According to the prosecutors, he used artificial intelligence to place the faces of children onto images and videos of nude people and of people engaged in sexual acts, then exchanged the material with a Canadian resident for real child sexual abuse material. Canadian authorities found messages and material connected to him after arresting the person he was communicating with and alerted US law enforcement; a joint investigation by Portland police, Homeland Security Investigations, the FBI and the TBI led to his arrest in November 2025. He was also charged with tampering with evidence after investigators said he deleted material before officers entered his home to execute a search warrant. The children whose faces were used are not identified, their number is not reported, and the reports do not say which AI tool was used or which offences he was convicted of.","incidentKind":"bounded_series","incidentDatePrecision":"unknown","exposurePattern":"unknown","reportedDate":"2026-09-25","aiSystem":"Unnamed AI tool or tools that prosecutors say he used to place children's faces onto sexual images and videos; the tool is not identified in any inspected report","aiProduct":"Unidentified image and video tool","severity":"high","verificationStatus":"credible","harmCategories":[],"harmOutcomes":["exploitation_or_abuse"],"harmOutcomeSummary":"Prosecutors say children's faces were placed onto AI-made sexual images and videos that were traded internationally in exchange for real child sexual abuse material (Sumner County DA release via WSMV, WKRN and WZTV). The children are not identified.","frameworkFacets":[],"causationStatus":"supported","participantUsersAffectedMin":0,"otherPeopleHarmedMin":0,"affectedCountStatus":"unquantified","affectedCountEvidence":"The prosecutors refer to 'children' whose faces were used but give no number, and none is identified; children depicted in the real material he received are not counted because that material is not AI-made and is not described. Unquantified, with zero placeholders.","victimAgeRange":"minor","jurisdiction":"US-TN","platformType":"other","outcomeType":"criminal_charges","outcomeStatus":"resolved","primarySourceUrl":"https://www.wsmv.com/2026/09/25/middle-tennessee-man-sentenced-30-years-using-ai-create-trade-child-pornography/","primarySourceLabel":"WSMV, 25 September 2026: Middle Tennessee man sentenced to 30 years for using AI to create, trade child pornography","firstPublishedAt":"2026-09-28T03:31:23.326395+00:00","updatedAt":"2026-09-30T01:17:49.53008+00:00","scopeVersion":"facts-v3","tags":["ai-csam","deepfake","child-sexual-abuse-material","sentencing","tennessee","sumner-county","canada","others-use","depicted-or-impersonated"]}]}