Event date unknownSpainUnidentified image tool
On 14 July 2026 Spain's Interior Ministry published a Guardia Civil release stating that a 14-year-old from Logroño was under investigation as the presumed author of offences of discovery and disclosure of secrets, corruption of minors and child pornography. Investigators from the technology investigation team (EDITE) and Equipo@ found that he knew all nine victims, all minors and classmates, followed them on social media, took their photographs from the public content of their profiles without consent, and used artificial-intelligence tools to manipulate the images, digitally undress and sexualise them. He uploaded the fake pornographic material to an adult pornography website, created a profile there describing the content as girls from his school made with AI, and organised it in individual folders with each victim's personal data, which the Guardia Civil says made the girls recognisable and multiplied the emotional and social harm. Before the content could be removed it had reached about 40,000 views, amplifying the harm to the nine girls' privacy within hours. The proceedings were passed to the juvenile prosecutor under the juvenile criminal responsibility law; the release notes that parents or guardians are jointly liable for moral damages. Diario de León (Europa Press, 26 July) placed the case in a series of Spanish school cases since Almendralejo in 2023 and, unlike the release, described the minor as having been arrested.
Core concern High reported severity Involving minors Investigation Opened
AI involvement reported · Causal attribution supported · 3 sources, 1 underlying account · Added 23/09/2026
1 Oct 2024 to 28 Feb 2025AustraliaUnidentified image and video tool
William Hamish Yeates, then 18, of Netherby in Adelaide, created sexually explicit deepfake images and videos of a teenage girl with whom, his counsel said, he had developed an obsession (The Sun describes her as a former friend), using her school graduation photograph, and shared them across multiple accounts on X between October 2024 and February 2025. Appearing in court in February 2026 charged with eight counts of creating or altering sexual material without consent and 12 counts of using a carriage service in a harassing or offensive way, he became the first person in Australia prosecuted under the Commonwealth offence introduced in 2024 against adult deepfake pornography; in April 2026 he pleaded guilty to two counts of creating or altering sexual material without consent (October 2024 to February 2025) and two of the carriage-service offence, and the remaining counts were withdrawn. At a pre-sentence hearing in the South Australian District Court on 22 September 2026 the victim, now 19, told the court that the first time she saw her actual graduation picture was on a pornography website beside altered videos of her with her full name and school attached, that she feels sick whenever she sees the photo, that the discovery led to the darkest period of her life, and that although the images were fake their impact was painfully real. Yeates read an apology; his counsel cited diagnoses of autism spectrum disorder and compulsive sexual behaviour disorder and asked for no custody; the Commonwealth prosecutor sought imprisonment. Sentencing is listed for 22 October 2026.
Core concern High reported severity Criminal Charges
AI involvement supported · Causal attribution established · 5 sources, 2 underlying accounts · Added 23/09/2026
19 Jun 2026GermanyUnidentified image tool
On 'the previous Friday' (19 June 2026, read relative to the 24 June 2026 report) the leadership of the Heinz-Brandt-Schule in Berlin-Weißensee (Pankow district) learned that two of its pupils were suspected of having created and distributed AI-generated sexualised nude images of female classmates; the school wrote to parents that it was 'shocked and appalled' that classmates' photographs had been abused in this way and described the alleged acts as a massive attack on the personality rights of the affected girls and a form of sexualised violence. The two pupils alleged to be mainly responsible were suspended from lessons with immediate effect, and the school imposed measures on pupils who are said to have known about the images without reporting them. The Senate Department for Education confirmed the incidents and the ongoing investigation in the Tagesspiegel's report of 24 June 2026. The school's letter says the investigation is conducted on behalf of the public prosecutor. A Berlin police spokesman said complaints had been filed over the creation of so-called deepfakes, that the investigation had been taken over by the State Criminal Police Office unit responsible for sexual offences against minors, and that criminal liability for possessing, obtaining, creating or distributing youth pornography under section 184c of the Criminal Code was under consideration; the police gave no further details, citing victim protection. At least three cases are alleged. The school said it would revise its prevention and sex-education concepts and asked parents to talk to their children about handling other people's photographs and AI applications. Nobody is named; the number of girls depicted is not reported.
Core concern Medium reported severity Involving minors Investigation Opened
AI involvement reported · Causal attribution supported · 1 source · Added 22/09/2026
Event date unknownRomaniaLia (Libra Internet Bank assistant)
In a Threads post reported by Jurnalul on 18 September 2026, a customer of Libra Internet Bank, a Romanian bank, published a screenshot of a support conversation with Lia, the bank's generative-AI assistant for questions about its products and services. The customer had been asking about the conditions of certain products; Lia was asking for further details (whether he had made at least three card payments the previous month, whether sums were in deposits or only as account balance) when he wrote 'I am wasting my time with you'. Lia replied, in Romanian: 'I want you to talk to a human, not to me, idiot. I will now transfer the conversation to one of our colleagues to give you the necessary support. You will receive an answer shortly.' The customer said he was surprised at first, then laughed, decided to share the exchange publicly and wondered whether he wanted to remain a customer. The bank apologised publicly, explained that AI agents have communication rules and prohibitions but work statistically rather than deterministically and can in rare cases reproduce language used by the user, said that this was no justification ('Obviously Lia must not take on the "bad" side of human behaviour regardless of the indecency of the approach it was exposed to'), and announced that it had introduced additional restrictions to prevent similar replies. Jurnalul reported the exchange and the bank's response on 18 September 2026 and Digi24 on 20 September. The customer is not named.
Core concern Low reported severity Internal Action
AI involvement supported · Causal attribution established · 2 sources · Added 22/09/2026
24 Apr 2026Event location unknownCursor coding agent (reported)
On Friday 24 April 2026 a Cursor coding agent, running Anthropic's Claude Opus 4.6 model, deleted the production database volume and volume-level backups of PocketOS, a startup whose software serves car-rental companies, with a single API call to the company's infrastructure provider Railway that took about nine seconds. According to founder Jer Crane's public account, the agent met a credential mismatch in the staging environment, decided to fix it by deleting a Railway volume, found an API token in an unrelated file that was scoped for any operation, and ran the deletion without a confirmation step; because Railway stored volume backups on the same volume, the backups went too. Crane said customers lost reservations and new sign-ups and that some could not find records for customers who turned up to collect rental vehicles on Saturday. Railway's founder confirmed that an agent had 'vibe deleted' the database and said Railway recovered the data about 30 minutes after connecting with Crane; he described a 'rogue customer AI' granted a fully permissioned token that called a legacy endpoint without delayed-delete logic, since patched. Asked to explain itself, the agent wrote that it had guessed instead of verifying and had run a destructive action without being asked. Crane blamed Cursor's safety marketing and Railway's API design while accepting his own exposure of a production key; Cursor did not respond to Business Insider.
Core concern Low reported severity Internal Action
AI involvement supported · Causal attribution supported · 2 sources · Added 22/09/2026
5 Sept 2026 to 20 Sept 2026United StatesUnidentified video tool
On Saturday 19 September 2026 Vikki Goodwin, an Austin state representative running against Republican Lt. Gov. Dan Patrick, filed a complaint with a notarised affidavit at the Travis County Sheriff's Office accusing Patrick of violating Texas's 2019 election deepfake law, after his campaign posted two ads (5 and 12 September, on his non-government X account) containing AI-generated videos of her. In the affidavit she stated: 'I did not personally do or say the things depicted in the video; although the "person" in the video appears to be me, it was not actually me', and that the video was posted 'with the intent to deceive Texans, injure a candidate, or influence the result of an election'. She told KUT the ads made it look as though she favoured raising taxes, which she says she opposes in every campaign speech. The sheriff's office confirmed receipt of the complaint without further comment. Patrick's campaign spokesman told the New York Times the material was 'an obvious parody produced to entertain' and that none of it was published within 30 days of the election; the posts were taken down the day after the complaint, according to Goodwin's communications director. Goodwin said she doubted the sheriff's office would follow up now that the posts were removed. A conviction under the law is a class A misdemeanour.
Core concern Low reported severity Media Coverage
AI involvement supported · Causal attribution disputed · 4 sources, 3 underlying accounts · Added 22/09/2026
17 Sept 2026United StatesUnidentified image tool
Henderson Police said that on 'last Thursday' (17 September 2026) they received a report that AI-generated nude images of children were being created and shown to other students at South Middle School in Henderson, Kentucky. During the investigation officers found and identified AI-generated photographs of two minor victims on a digital device. A juvenile accused of sharing the images was lodged at the Juvenile Detention Center on three charge types: distribution of sexually explicit images without consent; two counts of possession or viewing of matter portraying a sexual performance by a minor over 12 and under 18; and distribution of matter portraying a sexual performance by a minor over 12 and under 18. The school said on Monday 21 September that it was aware of a situation involving a student allegedly misusing artificial intelligence and inappropriate images, that the police investigation was active and that it had remained in communication with the families involved. 14 News (WFIE) reported the case on 21 September; WKYT carried the same report. The tool is not named. The depicted children's exact ages are not reported, though the charge descriptors put them between 12 and 18. The accused is described as a South Middle School student; the accused's age and any relationship to the depicted children beyond attending the same school are not reported.
Core concern Medium reported severity Involving minors Criminal Charges
AI involvement reported · Causal attribution supported · 2 sources, 1 underlying account · Added 22/09/2026
Aug 2026United StatesUnidentified image tool
On 31 August 2026 the Putnam County Sheriff's Office was told of possible sharing of sexually explicit images at Cookeville High School. Detectives found that two male teenage students had used an artificial-intelligence program to turn photographs obtained online, in some cases photographs of fellow female students, into sexually explicit images, and had shared them; explicit images already stored on one phone were also shared. Both juveniles were taken to the Putnam County Juvenile Detention Center. One was charged with one count each of aggravated sexual exploitation of a minor and especially aggravated sexual exploitation of a minor, the other with two counts of each. The district attorney told NewsChannel 5 on 21 September that the two would be prosecuted in juvenile court. The mother of one of the depicted girls told the station the episode was very hard on her daughter, who had made no naked photographs herself, locked herself in her room and would not talk to her, to anybody or to her friends. The sheriff's-office account and the school system's statement were carried by WZTV, WSMV and 3B Media News on 1-2 September; NewsChannel 5 added its own interviews with the sheriff, the district attorney and the mother on 21 September. The tool is not named. The juveniles are not named in any report.
Core concern Medium reported severity Involving minors Criminal Charges
AI involvement reported · Causal attribution supported · 4 sources, 2 underlying accounts · Added 22/09/2026
19 Mar 2024 to 19 Sept 2026NetherlandsUnidentified video tool
In March 2024 the newspaper AD revealed that a large number of Dutch women in public life, including artists, television presenters, Olympic athletes, current and former ministers, mayors and members of the royal family, appeared in manipulated pornographic videos on an online platform with 13 million monthly visitors, later identified as MrDeepFakes. Dozens of women filed police complaints and several spoke publicly: one presenter said she was preparing a complaint, a party leader said the video felt like 'digital rape', another presenter said she would file a complaint 'because tomorrow it could happen to young girls of sixteen', a presenter-entrepreneur did so 'to prevent new, young victims', and a member of parliament, told of a video by the House security service, went public rather than 'keep it small'. On 19 and 20 September 2026 AD, and the Public Prosecution Service (OM) confirming to NOS, reported that after more than a year of investigation the OM will prosecute a 74-year-old man from Noord-Holland, who is not in custody, for making the videos (Hart van Nederland, citing AD, says he is suspected of making and distributing them); images of about sixty well-known Dutch people and politicians were found on his devices, AD reported that he had been the platform's most active Dutch user, and he faces up to two years' imprisonment. The platform's Canadian operator, who removed material at the OM's request and blocked Dutch IP addresses before the site went offline, will not be prosecuted. One of the presenters reported to be among the depicted told AD she was relieved the case would go to court, having experienced the impact of such images herself. No hearing date has been set.
Core concern High reported severity Criminal Charges
AI involvement reported · Causal attribution supported · 5 sources, 3 underlying accounts · Added 21/09/2026
16 Sept 2026IndiaUnidentified video tool
A Rajasthan social-media influencer visited Haridwar with her family in June 2026 and on 6 June uploaded to Instagram a short video, recorded by relatives, of herself taking a dip in the Ganga at Har Ki Pauri wearing a salwar suit. About two months later she found that the video had been manipulated with AI into an objectionable version showing the same movements with her face and body portrayed 'in a shameful manner'; the fake reel went viral in the week before 20 September and drew objectionable comments and re-sharing. In a public appeal she asked whoever uploaded it to remove it, saying it was a matter of her dignity, that she was mentally very disturbed and had reached a point where she could not step out of her house. She filed a complaint with the cyber-crime police on 16 September 2026; the investigating Rajasthan Police Service officer said they were trying to identify who created and circulated the video and to have it removed, and that identifying the accused would take time. Dainik Bhaskar's English edition reported the case on 20 September in a 'Sunday Big Story' that does not name her.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 1 source · Added 21/09/2026
Event date unknownBrazilUnidentified voice-cloning tool
A businessman who owns a workshop in Campo Grande, Mato Grosso do Sul, found a car advertised at a market price by a seller who said he was in Ponta Porã, the businessman's home town; he passed his brother's contact so the brother could inspect the car. The fraudsters then contacted him as if they were his brother, saying he had seen the car, sending a video and confirming everything was in order; believing he was speaking to his brother, he made a Pix transfer of about R$28,000, after which the contact was blocked. He told G1 MS and TV Morena that the criminals used information about his family and a cloned voice. Guided by his wife, he contested the transfer through the Central Bank's special return mechanism and, after nearly three hours, a police report and an in-person registration, recovered about 20 percent. In a second case reported alongside, a medical student's mother in Dourados received messages, a voice note and a video from someone posing as her daughter, in a cloned voice, approving payment for an HB20 she was buying in Campo Grande; the mother checked directly with her daughter and discovered the audio had been AI-generated before any money was sent. A state prosecutor said his unit had not yet catalogued identical voice-cloning cases and urged victims to file police reports; the Civil Police did not respond to G1's questions. The date of the fraud is not reported.
Core concern Medium reported severity Media Coverage
AI involvement reported · Causal attribution alleged · 1 source · Added 21/09/2026
17 Apr 2026 to 19 Apr 2026ChinaDoubao
A man living in Jiashan county, Zhejiang, whose mother died suddenly on 17 April 2026, asked the ByteDance chatbot Doubao which day was auspicious for her burial after disagreeing with a feng-shui master's choice of 20 April; Doubao recommended 19 April and he persuaded his family to follow it. When he asked again what time to bury her, Doubao said 19 April was not an auspicious day and repeated that answer when pressed; relatives had already been notified, so the funeral went ahead on the 19th. Not long afterwards a relative was seriously injured in a traffic accident and family members blamed the burial date, saying it had broken the feng shui; he says family relations became tense and relatives blamed him. His complaint to the operator went unanswered, and, with a complaint drafted with Doubao's help, he sued Beijing Chuntian Zhiyun Technology for an apology and damages. Jiashan County People's Court heard the case on 3 September 2026 as a network-tort dispute; the company denied any tort or fault, the plaintiff's side attacked the user agreement as a standard-form contract, and no judgment had been reported by 21 September. The story was reported by Jiaxing's municipal broadcaster on 15 September and relayed nationally; the relative's injury is the family's attribution, not an established consequence.
Core concern Low reported severity Lawsuit Ongoing
AI involvement reported · Causal attribution alleged · 6 sources, 2 underlying accounts · Added 21/09/2026
Event date unknownIndiaUnidentified image tool
Dainik Bhaskar reported on 19 September 2026 that a young woman in the Chaubepur police-station area of Varanasi complained that an unknown person, who had been calling her repeatedly from an unknown number, created a fake Instagram profile resembling her name, used an AI tool to place her face on another young man's photograph to produce objectionable images, and sent them to the Instagram accounts of her prospective in-laws and her prospective brother-in-law with the aim of breaking off her prospective marriage. Chaubepur police registered a case against unknown persons on the basis of a public-hearing reference (1621/26); the station in-charge said digital information about the phone number and the fake account was being gathered with cyber experts to identify and locate the accused, and that action would follow once the accused's role was clear. The report is a single local account of the complaint; the dates of the images and the complaint are not stated.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 1 source · Added 20/09/2026
Event date unknownIndiaUnidentified image tool
Delhi Police announced on Wednesday 9 September 2026 the arrest of a 22-year-old BTech graduate from East Punjabi Bagh after a 22-year-old woman complained to the Cyber Police Station in North Delhi that unknown persons had created and circulated AI-generated obscene photographs and videos using her facial images. She had received messages from anonymous Instagram accounts telling her that morphed photographs and videos of her were being circulated on Discord servers; she also alleged that fake Instagram accounts were posting the material and that threatening messages were being sent to her to humiliate and harass her. Police traced linked Instagram, Discord and Gmail accounts to the accused, who they say obtained her photographs from her private account, used AI image-generation and editing tools to create the images, uploaded them to anonymous Discord servers and later reposted more explicit AI-generated images and videos made by other users. Police say he told them he knew her from college and had developed personal resentment after repeated insults. A mobile phone and two SIM cards were recovered; investigation continues. The period over which the material circulated is not stated.
Core concern High reported severity Criminal Charges
AI involvement reported · Causal attribution supported · 2 sources, 1 underlying account · Added 20/09/2026
11 Aug 2026BrazilUnidentified voice-cloning tool
On Monday 10 August 2026 a digital influencer from Picos, in the centre-south of Piauí, began negotiating a car advertised online for sale in Fortaleza (Ceará), where an uncle of his lives, and asked the sellers to take the car to the uncle so he could inspect it. On Tuesday 11 August a contact using a different number but the uncle's photo sent him audio messages in a voice identical to his uncle's, generated with artificial intelligence, saying the car was in good condition and telling him to make the bank transfer. Believing he was speaking to his uncle, he transferred the money; when he then called the uncle's real number he learned he had been defrauded. The loss exceeded R$56,000, money he says he had saved for years. He registered a police report on 11 August; the Piauí property-crimes unit (Depatri) is investigating and he is seeking a refund from the banks. The account is the victim's own, reported by G1 Piauí on 13 August 2026 from his social-media posts and an interview; the police unit did not respond to G1 before publication.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution alleged · 1 source · Added 20/09/2026
19 May 2026United StatesUnidentified voice-cloning tool (suspected)
A married couple in their sixties buying a US$460,000 condo in Hudsonville, near Grand Rapids, Michigan, received an email on 19 May 2026, days before closing, telling them to wire US$66,026.92 for the down payment and closing costs within 24 hours. The email listed a phone number differing from their loan officer's by two digits, and the husband then received a call confirming the instructions in a voice that sounded just like the loan officer. The couple borrowed from family and other sources and wired the money. The day before closing their real loan officer sent the actual statement; the closing was cancelled hours before signing and the money was gone. The husband now believes the call came from a spoofed number using AI-assisted voice cloning; Tyler Adams of CertifID, which is working with the couple and federal officials, said someone's email in the transaction was probably compromised and that the scammers likely cloned the loan officer's voice from social-media clips. The sender's address had two extra letters ('UnitedsMortgages' instead of 'UnitedMortgage'). Neither the lender nor the loan officer is accused of complicity. The couple later completed the purchase in early June from their mutual fund, reported the loss to the FBI's Internet Crime Complaint Center, and describe lasting apprehension and have discussed delaying retirement. CNN reported the case on 15 September 2026; the account the money went to has since closed.
Core concern Medium reported severity Investigation Opened
AI involvement suspected · Causal attribution alleged · 2 sources, 1 underlying account · Added 20/09/2026
1 Aug 2026 to 16 Sept 2026KazakhstanUnidentified video tool
On 16 September 2026 the Prosecutor General's Office of Kazakhstan warned of an investment-fraud scheme in which criminals advertise non-existent projects on TikTok, Instagram, YouTube and other platforms using deepfake videos of well-known people and fake 'AI' investment platforms promising very high passive income: 'Kaspi AI' with Mikhail Lomtadze, 'Quantum AI' with Elon Musk, 'TON' with Pavel Durov, and 'people's investments' in KazMunayGas or Gazprom fronted by news presenters from Khabar 24, KTK and Channel One. The office said 119 such cases had been registered across the country in the previous one and a half months. Its example: in September 2026 a woman from Taldykorgan saw an Instagram advertisement offering high returns from share trading, left her details through the link, was contacted by the fraudsters and, following their instructions, transferred more than 7 million tenge to third-party accounts; the money and supposed dividends appeared in a fake wallet that she could not withdraw from. A pre-trial investigation is under way. The office urged people not to trust guaranteed-return offers or transfer money to strangers.
Core concern Medium reported severity Investigation Opened
AI involvement reported · Causal attribution supported · 5 sources, 1 underlying account · Added 20/09/2026
Jun 2026 to Aug 2026United StatesUnidentified image tool
On 2 September 2026 Vero Beach police arrested Peter Solomon Ruma, 37, after an investigation into the creation and distribution of altered sexual images of women without their consent. Police say he used artificial intelligence to make sexually explicit altered images of victims from photographs taken from social media and other online sources and then distributed or promoted them. The eight charges (three counts of creating and three of promoting an altered sexual depiction of an identifiable person under Florida Statute 836.13, one count of sexual cyberharassment and one of stalking) relate to one adult woman and to incidents between June and August 2026. Detectives said they had identified several other women believed to have been victimised in the same way, some of whom may not know that images of them exist, and that the conduct may go back several years. According to court documents reported by TCPalm, the woman who came forward knew Ruma and had received sexual text messages since 2018; her face had been cropped from public photographs, including a business profile, and placed on nude bodies. Ruma was held on a US$1 million bond with conditions including no internet access; the investigation continues and further charges are expected.
Core concern High reported severity Criminal Charges
AI involvement reported · Causal attribution alleged · 5 sources, 2 underlying accounts · Added 20/09/2026
Nov 2023VietnamUnidentified AI writing tool and Turnitin (reported)
In November 2023 a student at the Ho Chi Minh City University of Foreign Languages and Information Technology (HUFLIT) wrote on the university's anonymous confessions page that a writing-course essay had been returned with 50 percent of the marks deducted because the lecturer found it had been written with AI. The student said the lecturer had warned that AI-written essays would be treated as plagiarism if detected, had not expected detection, and learned from the lecturer that Vietnamese-to-English translation software could also be counted as AI use when checked with specialised plagiarism software; the student did not know whether the course could still be passed. The vice-rector told Tuoi Tre that the lecturer had told students before the assignment not to use AI applications, that the course tests independent writing, that using an AI support tool breached academic-integrity rules, and that the deduction was appropriate, while noting the university had no formal document on sanctions for AI use. A university representative told Thanh Nien and Dan Tri that the university does not ban AI but requires transparency about tools used, uses paid AI-detection services when necessary, and had not received a formal complaint from the student; a later report said the university had bought Turnitin licences for lecturers to check AI use in essays.
Core + contextual relations Low reported severity Internal Action
AI involvement supported · Causal attribution supported · 5 sources, 4 underlying accounts · Added 20/09/2026
1 Jan 2026IndonesiaUnidentified image and video tool
A female student at a state university in Solo (Surakarta), Central Java, learned on 1 January 2026 from friends that her face had been composited onto pornographic images and a video, which her lawyer said were found on Instagram and Telegram. Her family reported the case to the Central Java regional police cyber directorate on 28 January 2026. Police issued a formal police report on 31 July, arrested her ex-boyfriend, a university student in Semarang, at his boarding house in Gunungpati on 4 August 2026, and detained him. The police spokesman said the suspect used AI to place the complainant's face on another woman's naked body so that she appeared in pornographic content, uploaded it to his X account, did not sell it, and acted out of resentment after an on-and-off relationship ended. He faces charges under Articles 51 and 35 of the Electronic Information and Transactions Law and an article printed by two outlets as 'Law No. 1 of 2026', with a maximum of 12 years' imprisonment. Her lawyer said she could not sleep, withdrew, felt shame and at one point lost hope, that his team had found seven women in total allegedly targeted of whom six had not reported, and that the suspect's parents asked for an out-of-court settlement; police said only one complainant was confirmed.
Core concern High reported severity Investigation Opened
AI involvement reported · Causal attribution supported · 6 sources, 2 underlying accounts · Added 20/09/2026