Purportedly AI-Generated Sexual Images of At Least 400 Minors at Zacatecas School Were Reportedly Created and Sold Online

A student at Escuela Secundaria Técnica No. 1 in Zacatecas, Mexico, allegedly used an AI image-generation system to create sexually explicit manipulated images of classmates. According to victims and parents, the student reportedly produced a catalog containing images of more than 400 minors, organized by grade and group, and distributed or sold the material online. Students reported that the perpetrator took photos around the school to use as inputs. The Fiscalía de Zacatecas opened an investigation for crimes against sexual privacy and offered psychological and legal support to victims. The manipulated images are reportedly believed to have circulated beyond the school.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The student maliciously used AI to generate and distribute non-consensual sexually explicit imagery of specific classmates to humiliate and harass them.

Additional risk subdomains

• 1.2 Exposure to toxic content: The incident involved the creation and online distribution of sexually explicit images of minors, which constitutes child sexual abuse material.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was caused by a human student who intentionally used a deployed AI tool to generate and distribute explicit images of classmates.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The system used is an AI image-generation tool capable of generating deepfakes. According to the EU AI Act, AI-generated content such as deepfakes falls under Limited Risk, requiring transparency obligations, though its malicious use here caused severe harm.

AI system and alleged parties

• AI system: unspecified AI image-generation system
• AI purpose: Deepfake Image Generation; Image Generation
• Behaviour type: Tool
• Alleged developer: Unknown deepfake technology developers
• Alleged deployer: Unnamed student(s) from Zacatecas
• Alleged harmed parties: Students of Escuela Secundaria Técnica No. 1 in Zacatecas, Family of students of Escuela Secundaria Técnica No. 1 in Zacatecas, Epistemic integrity

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Severe. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Substantial, indirect Substantial
• Differential treatment: direct Negligible, indirect Minor
• Civil rights: direct Minor, indirect Minor
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Minor, indirect Minor
• Psychological: direct Minor, indirect Minor
• Epistemic: direct Minor, indirect Negligible
• Child sexual exploitation and abuse: direct Severe, indirect Negligible

Malicious content

Reported: Yes, the report explicitly describes the creation and distribution of toxic and malicious content.

Directly caused: A student used AI to generate a pornographic catalog containing manipulated nude images of approximately 400 classmates.

Indirectly caused: The generated explicit images were uploaded and distributed on social media and the internet.

Inferred additional harm: It is likely that these images continue to circulate online on various platforms, exposing more people to the toxic content and permanently affecting the victims.

Differential treatment

Reported: Yes, the report describes differential treatment and victim-blaming of the female students by school staff.

Indirectly caused: School authorities reportedly blamed the female victims, claiming it was their fault for wearing short skirts, rather than punishing the perpetrator.

Civil rights

Reported: Yes, the report explicitly describes violations of the victims' rights to privacy and sexual intimacy.

Directly caused: The perpetrator violated the physical and digital privacy of over 400 students by taking photos without consent and generating explicit images.

Indirectly caused: The school authorities failed to protect the students' rights by allegedly attempting to cover up the incident and destroying evidence.

Inferred additional harm: The ongoing online presence of these images represents a continuous violation of the victims' civil rights and right to privacy.

Privacy

Reported: Yes, the report explicitly describes severe privacy violations.

Directly caused: The perpetrator took photos of classmates without consent, including outside bathrooms, and used their names, grades, and groups to catalog the explicit images.

Indirectly caused: The private information and manipulated images of the students were shared publicly on social media.

Inferred additional harm: The victims' personally identifiable information and explicit likenesses may remain accessible on the internet indefinitely, causing permanent privacy damage.

Psychological

Reported: Yes, the report explicitly describes psychological harm and distress to the victims and their families.

Directly caused: The victims suffered severe distress, harassment, and feelings of unsafety, leading parents and students to protest and block a major highway.

Indirectly caused: The victims faced victim-blaming by school staff, who accused them of being responsible due to their clothing, compounding their trauma.

Inferred additional harm: Given that over 400 minors were targeted with non-consensual explicit imagery, it is highly likely that many suffer from long-term anxiety, depression, and social trauma.

Epistemic

Reported: Yes, the report describes the creation of fabricated, deepfake pornographic images.

Directly caused: The AI tool was used to fabricate non-consensual nude images of students, creating false representations of their bodies.

Child sexual exploitation and abuse

Reported: Yes, the report explicitly describes a CSEA incident involving minors at a secondary school.

Directly caused: The perpetrator generated and distributed sexually explicit manipulated images of approximately 400 underage classmates.

Inferred additional harm: There is a high risk that the generated child sexual abuse material (CSAM) has been commercialized or downloaded by other malicious actors online.

People affected

• Occurrences reported: 1
• People reportedly harmed: 400
• People reportedly exposed: 400

Potential causes

Management

• School Cover-Up of Abuse: Management prioritized school reputation over protecting victims from AI abuse.
• Lack of School AI Policies: No guidelines existed to handle AI-related student misconduct.

Technology

• AI Image Manipulation Tools: Generative AI tools allowed easy creation of realistic deepfake pornography.
• Lack of Deepfake Detection: Platforms lacked automated detection to block distribution of AI-altered media.

Data Inputs

• Unauthorized Photos of Minors: Photos of students taken at school were used as inputs for the AI generator.
• Personal Identifier Linking: Real names and school details were paired with the AI-generated images.

Human Factors

• Malicious Intent of Student: The student deliberately captured photos to create harmful deepfake content.
• Victim Blaming by School Staff: Staff blamed victims' clothing instead of addressing the AI abuse.
• Lack of AI Ethics Awareness: Students lacked awareness of the consequences of AI-enabled harassment.

Process and Methods

• Inadequate School Surveillance: Lack of monitoring allowed the student to take photos in restricted areas.
• Evidence Deletion by Staff: Staff deleted evidence, hindering investigation of the AI incident.
• Poor Incident Reporting Path: Early alerts by victims to school authorities were ignored or dismissed.

Regulatory Environment

• Weak AI Image Regulations: Lack of strict legal frameworks governing AI-generated non-consensual imagery.
• Delayed Law Enforcement Action: Initial lack of prompt response from authorities to address AI crimes.

Information quality

• Classification confidence: High
• Reason for confidence: The report provides clear details about the nature of the incident, the number of victims (approximately 400), the method used (taking photos and using AI to generate explicit images), and the social/legal aftermath (protests, prosecutor investigation). The role of AI as an image generator is explicitly stated.
• Ambiguities identified: The specific AI tool or platform used by the student is not identified.
• Alternative interpretations: None. The facts of the non-consensual deepfake creation and distribution are clear and uncontested in the report.

A student in Zacatecas, Mexico, used an AI tool to generate and distribute non-consensual sexually explicit deepfakes of approximately 400 classmates. While the incident caused significant local outrage, protests, and school closures, it remains a localized law enforcement and administrative issue with minor national security implications.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: Mexico
• Alleged perpetrator: Individual

Threat characteristics

• Imminence: Long-term. The immediate crisis is localized and being managed by local authorities, representing a long-term strategic concern regarding regulatory frameworks for AI tools.
• Autonomy: Human-controlled. The student acted as a direct human controller, taking photos and feeding them into the AI image generator to create the explicit content.
• Novelty: Established threat. Non-consensual deepfake generation and distribution is an established threat vector, although the scale of 400 victims in a single school represents a significant local escalation.

Impact by dimension

• Physical security: Negligible. No threat to physical systems, critical infrastructure, or kinetic safety. The incident was entirely digital and localized to a school environment.
• Information security: Negligible. No compromise of intelligence capabilities, classified models, or state-level information warfare. The deepfakes were localized harassment, not a state-sponsored campaign.
• Sovereignty: Negligible. No threat to state authority, elections, or core government functions. The local prosecutor's investigation represents standard law enforcement procedures.
• Economic security: Negligible. No impact on financial systems, strategic technologies, or national economic security.
• Societal stability: Minor. Notable local impact with over 400 victims, leading to protests and road blockages. However, this remains a localized law enforcement and school administrative issue with minor national security impact.