Tennessee Meteorologist's Likeness Reportedly Used in Sextortion Campaign Involving Purported AI-Generated Content

Bree Smith, a meteorologist in Nashville, Tennessee, was reportedly targeted in a sextortion campaign involving purported AI-generated deepfakes that manipulated her likeness into explicit content. According to reporting, Smith's face was digitally placed onto semi-nude and nude bodies, with the resulting media circulated online by impersonators seeking money. Smith documented the spread of these accounts and has advocated for legislative responses, including a new Tennessee bill addressing deepfake-related harms.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involved malicious actors using AI-generated deepfakes of a public figure to impersonate her, scam her fans for money, and subject her to targeted humiliation and extortion.

Additional risk subdomains

• 1.2 Exposure to toxic content: The victim and her fans were exposed to non-consensual sexually explicit and degrading AI-generated videos and images.
• 3.1 False or misleading information: AI-generated videos perfectly mimicked the victim's voice and appearance to deceive viewers into believing they were interacting with her.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The harm was caused by human actors intentionally using deployed AI deepfake generation tools to create explicit content and scam the victim's fans.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The report describes the creation of deepfakes, which are subject to transparency obligations under the Act. The definition states that 'AI-generated content such as deepfakes' falls under Limited Risk.

AI system and alleged parties

• AI system: unspecified
• AI purpose: Deepfake Video Generation; Voice Generation
• Behaviour type: Tool
• Alleged developer: Unknown deepfake technology developers
• Alleged deployer: Unknown sextortionists, Unknown cybercriminals
• Alleged harmed parties: WTVF, Truth, NewsChannel 5 Nashville WTVF, General public of Tennessee, General public, Epistemic integrity, Bree Smith

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Minor, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Negligible
• Psychological: direct Minor, indirect Negligible
• Epistemic: direct Minor, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Malicious content

Reported: Yes, the reports explicitly describe the creation and distribution of sexually explicit deepfake videos and images.

Directly caused: Perpetrators created semi-nude images and sexually explicit videos pasting Bree Smith's face onto other bodies, along with AI-generated audio mimicking her voice.

Inferred additional harm: Hundreds of fake accounts replicated and spread this explicit content across Facebook and Instagram, exposing thousands of social media users.

Civil rights

Reported: Yes, the reports describe a violation of the victim's personal rights and bodily autonomy through non-consensual sexual depiction.

Directly caused: The victim's likeness and voice were weaponized without her consent, violating her personal rights and leading to her advocating for legal protections.

Psychological

Reported: Yes, the report explicitly describes severe psychological distress, depression, and trauma experienced by the victim and her family.

Directly caused: Bree Smith experienced a 'very dark depression', felt 'humiliated and scared', and cried herself to sleep. Her family (husband and two sons) also endured significant trauma from the explicit depictions.

Inferred additional harm: It is likely that fans who were targeted or scammed also experienced psychological distress and violation, though specific details are not quantified.

Epistemic

Reported: Yes, the reports describe AI-generated deepfake videos and fake accounts used to deceive viewers into believing they were interacting with the real Bree Smith.

Directly caused: AI-generated videos perfectly mimicked Bree Smith's voice and appearance, with one video showing her in a simulated newsroom saying 'Yes dear, it is me, it is really me' to mislead viewers.

Inferred additional harm: The proliferation of hundreds of fake accounts created confusion among her online community, eroding trust in her authentic digital presence.

People affected

• Occurrences reported: 1
• People reportedly harmed: 5
• People reportedly exposed: 100

Potential causes

Management

• Platform Inaction: Social media platforms failed to effectively block persistent imposters.
• Employer Risk Failure: Station management did not anticipate or manage deepfake risks to staff.

Technology

• Accessible Deepfake Software: Readily available AI apps allow anyone to easily generate realistic deepfakes.
• Neural Network Replication: AI models can accurately mimic human faces and voices from minimal data.

Data Inputs

• Public Image Availability: Abundant public media of the victim was used to train the deepfake model.
• Non-Consensual Data Use: Victim's likeness was stolen and processed without consent.

Human Factors

• Financial Sextortion Intent: Perpetrators exploited the AI content to scam fans for money.
• Viewer Deception: Unsuspecting fans believed the realistic AI videos and sent money.

Process and Methods

• Slow Platform Moderation: Reporting fake accounts was slow, leading to a whack-a-mole situation.
• Inadequate Employer Support: Employer's initial processes failed to offer legal or technical recourse.

Regulatory Environment

• Absence of Deepfake Laws: Tennessee had no criminal laws banning intimate deepfakes at the time.
• Lack of Civil Remedies: Victims lacked legal avenues to sue creators for financial damages.

Information quality

• Classification confidence: High
• Reason for confidence: The reports provide consistent, detailed, and first-hand testimony from the primary victim, Bree Smith, describing the nature of the deepfakes, the platforms used, the scam mechanisms, and the psychological impact. The legislative context and statements from her former employer further validate the accounts.
• Ambiguities identified: The specific AI tools or platforms used to generate the deepfakes are not identified.
• Alternative interpretations: None. The reports clearly and consistently describe a targeted deepfake harassment and scam campaign.

An AI-enabled deepfake and sextortion campaign targeted a local US meteorologist to scam social media followers. While causing severe personal distress and leading to state-level criminal legislation, the incident remains a localized criminal matter with negligible direct implications for national security.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. Represents an ongoing strategic concern regarding the misuse of consumer AI tools rather than an active national security crisis.
• Autonomy: Human-controlled. The AI tools were directly operated by human perpetrators to generate explicit content, with no autonomous decision-making.
• Novelty: Evolved capability. Demonstrates an evolution in the accessibility and realism of consumer-grade synthetic media tools used for targeted harassment.

Impact by dimension

• Physical security: Negligible. No physical infrastructure, systems, or human safety threats occurred during this incident.
• Information security: Negligible. No strategic information warfare, state-sponsored disinformation campaigns, or intelligence compromises were identified.
• Sovereignty: Negligible. Core government functions and sovereign authority remained unaffected, though the event prompted local state legislative action.
• Economic security: Negligible. Financial impact was restricted to localized scams of social media followers, posing no threat to national economic stability.
• Societal stability: Minor. Represents a localized violation of individual privacy and civil rights through non-consensual deepfakes, prompting state-level legislative action but without population-scale disruption.