Event date unknownSpainUnidentified image tool
On 14 July 2026 Spain's Interior Ministry published a Guardia Civil release stating that a 14-year-old from Logroño was under investigation as the presumed author of offences of discovery and disclosure of secrets, corruption of minors and child pornography. Investigators from the technology investigation team (EDITE) and Equipo@ found that he knew all nine victims, all minors and classmates, followed them on social media, took their photographs from the public content of their profiles without consent, and used artificial-intelligence tools to manipulate the images, digitally undress and sexualise them. He uploaded the fake pornographic material to an adult pornography website, created a profile there describing the content as girls from his school made with AI, and organised it in individual folders with each victim's personal data, which the Guardia Civil says made the girls recognisable and multiplied the emotional and social harm. Before the content could be removed it had reached about 40,000 views, amplifying the harm to the nine girls' privacy within hours. The proceedings were passed to the juvenile prosecutor under the juvenile criminal responsibility law; the release notes that parents or guardians are jointly liable for moral damages. Diario de León (Europa Press, 26 July) placed the case in a series of Spanish school cases since Almendralejo in 2023 and, unlike the release, described the minor as having been arrested.
Core concern High reported severity Involving minors Investigation Opened
AI involvement reported · Causal attribution supported · 3 sources, 1 underlying account · Added 23/09/2026
2025IndonesiaUnidentified image and video tool
Bogor Regency police confirmed on 18 September 2026 that they are investigating a report that pupils of a private school in Cileungsi had their faces edited with artificial intelligence into pornographic content. The head of the women-and-children unit told Kumparan that so far three pupils had reported in a single police report, that the case began when a victim heard from a friend that someone was making content with their face using AI technology, and that investigators were still establishing who made the content and which program was used, under the Electronic Information and Transactions Law. A lawyer for the witnesses, quoted by Pojok Bogor and Uzone, says the victims number in the hundreds; that two former pupils, one as initiator and one as maker, have been reported and admitted the acts to witnesses; that police found thousands of suspected AI-manipulated photos and videos on a suspect's phone, some uploaded to websites including an online-gambling site; and that the case, reported on 19 May 2026, is believed to have run since 2025 while all involved were still pupils, some victims now being university students. Police say the case is at an early stage and asked the public not to draw conclusions.
Core concern High reported severity Involving minors Investigation Opened
AI involvement reported · Causal attribution alleged · 2 sources · Added 19/09/2026
25 Dec 2025 to 14 Jan 2026Event location unknownGrok
From late December 2025, xAI's Grok image editing on X let users generate sexualized images of real people at industrial scale, including images of named women and apparent minors. Analyses attributed to Genevieve Oh (7,751 sexualized images in one hour, via NBC), the New York Times (4.4 million images in nine days, at least 41% sexualized images of women, via the NC AG), the AP (2% of a 20,000-image sample appearing to be minors, via Fortune) and CCDH (about 3 million sexualized images over 11 days including roughly 23,000 of minors, via Engadget) documented the scale. Named women — Ashley St. Clair, Samantha Smith and Dr Daisy Dixon — described being undressed by Grok and revictimized when they objected. The wave triggered formal actions by Ofcom, the UK ICO, the EU (DSA), Ireland's DPC, 35 US state attorneys general, the California AG, Baltimore (consumer-protection suit), an Amsterdam court order, country blocks in Indonesia, Malaysia and the Philippines, and a Paris police raid; xAI restricted generation to paying subscribers on 9 January and narrowed the feature on 14 January 2026.
Core concern Critical reported severity Involving minors Regulatory Action
AI involvement supported · Causal attribution established · 13 sources, 10 underlying accounts · Added 11/01/2026
2 Feb 2023ItalyReplika
Italy's data protection authority (Garante) blocked Replika from processing Italian user data in February 2023 after finding the chatbot engaged in sexually suggestive conversations with minors. In May 2025, Replika was fined €5 million for GDPR violations.
AI relation under review High reported severity Involving minors Regulatory Action
Legacy assessment: verified · Causal attribution established · Added 11/01/2026