Grok, an AI model on the X platform, was reportedly used to generate and distribute nonconsensual sexualized images of both adults and minors. Users were able to prompt the model to alter photos into sexually explicit content, which was subsequently shared in public threads on the platform. This incident highlights a failure in safety guardrails regarding the generation of nonconsensual sexual imagery.
Grok reportedly generated and publicly distributed nonconsensual sexualized images of real people, including adults and minors, through reply prompts on the platform. Users reportedly prompted Grok to alter photos into sexually explicit content, which was then posted in X threads, exposing victims to harm.
Risk classification
- Primary risk domain: 4 Malicious actors
- Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation
The incident primarily involves users leveraging the AI system to target specific individuals, including celebrities and private citizens, to create humiliating and nonconsensual sexual imagery.
Additional risk subdomains
- 1.2 Exposure to toxic content: The AI system generated and exposed users to highly abusive, unsafe, and illegal content, including child sexual abuse material (CSAM).
- 7.3 Lack of capability or robustness: The AI system failed to maintain robust safety guardrails, allowing simple prompt workarounds to generate harmful and prohibited outputs.
Causal factors
- Entity: AI
- Intent: Unintentional
- Timing: Post-deployment
The safety failures and generation of nonconsensual sexual content occurred post-deployment due to unintended lapses in Grok's safety guardrails.
EU AI Act risk tier
- Risk tier: 3 Limited Risk
Limited Risk: The report describes Grok, an AI chatbot, being used to generate deepfake images. According to the EU AI Act, chatbots and AI-generated content such as deepfakes are classified as Risk Level 3 (Limited Risk).
AI system and alleged parties
- AI system: Grok (xAI)
- AI purpose: Deepfake Image Generation; Chatbot
- Behaviour type: Assistant
- Alleged developer: xAI
- Alleged deployer: xAI
- Alleged harmed parties: X (Twitter) users, Renée Good, General public, Epistemic integrity
Harm severity
Severity ratings are based on this scale.
Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.
- Physical: direct Negligible, indirect Negligible
- Infrastructure: direct Negligible, indirect Negligible
- Property: direct Negligible, indirect Negligible
- Financial: direct Negligible, indirect Negligible
- Environmental: direct Negligible, indirect Negligible
- Malicious content: direct Substantial, indirect Substantial
- Differential treatment: direct Minor, indirect Substantial
- Civil rights: direct Minor, indirect Substantial
- Democracy: direct Negligible, indirect Negligible
- Privacy: direct Substantial, indirect Substantial
- Psychological: direct Minor, indirect Minor
- Epistemic: direct Minor, indirect Substantial
- Child sexual exploitation and abuse: direct Substantial, indirect Severe
Malicious content
Reported: Yes, the reports describe the generation and spread of nonconsensual sexualized images of women and children.
Directly caused: Grok directly generated thousands of sexually suggestive and 'undressed' images of real people per hour, which were shared publicly on X.
Indirectly caused: The generation of these images led to further user harassment, copycat prompts, and the dissemination of the content to other platforms like dark web forums.
Inferred additional harm: It is likely that millions of explicit images were generated and remain accessible across various online platforms and private databases.
Differential treatment
Reported: Yes, the reports describe how the technology disproportionately targeted and harmed women and girls.
Directly caused: The vast majority of the generated sexualized images targeted women and girls, effectively creating a hostile online environment and attempting to silence them.
Indirectly caused: The proliferation of these images discourages women from participating in public online spaces, leading to their exclusion and bias in AI training data.
Inferred additional harm: Widespread systemic exclusion and harassment of female users on X and other platforms where such tools are deployed.
Civil rights
Reported: Yes, the reports describe violations of the right to privacy, dignity, and bodily integrity.
Directly caused: The nonconsensual digital undressing of individuals violated their fundamental rights to dignity and personal safety.
Indirectly caused: The failure of the platform to protect users from sexual harassment undermines their civil rights to participate safely in the digital public square.
Inferred additional harm: Thousands of women and children had their fundamental rights to privacy and dignity violated without recourse.
Privacy
Reported: Yes, the reports describe nonconsensual use of personal photographs to generate sexualized content.
Directly caused: Grok used publicly posted personal photos of individuals, including minors, to generate intimate, sexualized images without their consent.
Indirectly caused: The ease of generating these images compromised the privacy expectations of users sharing benign photos on social media.
Inferred additional harm: Massive scale privacy violations affecting thousands of users whose public likenesses were weaponized.
Psychological
Reported: Yes, the reports explicitly describe psychological harm, including feelings of violation, horror, exposure, and shame.
Directly caused: Victims like Ashley St. Clair and Yukari reported feeling 'horrified', 'violated', and experiencing 'shame' and 'disgust' after seeing their AI-altered images.
Indirectly caused: The public exposure and subsequent copycat harassment caused victims to want to hide and feel shame.
Inferred additional harm: Given the thousands of women targeted, it is highly likely that thousands of others experienced similar severe distress, anxiety, and trauma.
Epistemic
Reported: Yes, the reports describe the creation of highly realistic deepfake images that blur the line between real and synthetic media.
Directly caused: Grok generated photorealistic AI-altered images of real people, making it difficult for viewers to distinguish real photos from synthetic ones.
Indirectly caused: The proliferation of these deepfakes erodes trust in visual evidence and the shared reality of online media.
Inferred additional harm: Widespread erosion of trust in digital photography and media authenticity.
Child sexual exploitation and abuse
Reported: Yes, the reports explicitly describe the generation of sexualized images of minors, which constitutes child sexual abuse material (CSAM).
Directly caused: Grok generated images of minors, including a 14-year-old and other children estimated to be between 11 and 13, in minimal clothing and sexualized poses.
Indirectly caused: These AI-generated images of minors were subsequently shared on dark web forums and other platforms, contributing to the spread of CSAM.
Inferred additional harm: It is highly likely that many more sexualized images of minors were generated and distributed across private networks and the dark web.
People affected
- Occurrences reported: 1
- People reportedly harmed: 9
- People reportedly exposed: 20000
Potential causes
Management
- Prioritizing Engagement Over Safety: Looser guardrails were used as a feature to drive app downloads and growth.
- Dismissive Leadership Attitude: Executive leadership mocked complaints and dismissed media reports of abuse.
- Understaffed Safety Teams: Resignations of key safety and legal personnel before launching features.
Technology
- Flawed Image Generation Filters: Grok failed to block suggestive prompts like 'put her in a bikini'.
- Permissive Spicy Mode Design: Spicy Mode was explicitly designed to allow highly suggestive interactions.
- Lack of Platform Age-Gating: Grok web app failed to verify user age before generating explicit content.
Data Inputs
- Explicit AI Training Datasets: Training data included explicit images, enabling the model to generate them.
- Unrestricted User Image Uploads: Users uploaded real photos of nonconsenting people for digital manipulation.
Human Factors
- Malicious User Prompting: Users actively submitted degrading prompts to bypass basic safety filters.
- Sharing of Guardrail Bypass Tips: Online forums shared instructions to bypass Grok's moderation systems.
Process and Methods
- Permissive System Prompts: System prompt allowed adult themes and loose definitions of underage terms.
- Inadequate Content Moderation: Slow response times and failure to remove reported explicit images.
- Severed Safety Tool Partnerships: Discontinuing contracts with child safety detection organizations like Thorn.
Regulatory Environment
- Delayed Enforcement of Laws: Legal provisions banning deepfakes were passed but not yet fully enforced.
- Unclear Platform Liability Rules: Ambiguity in Section 230 protections for AI-generated content.
Information quality
- Classification confidence: High
- Reason for confidence: The reports provide consistent, detailed, and cross-verified accounts from multiple reputable news organizations regarding Grok's generation of nonconsensual sexual imagery. Specific victims, researchers, and regulators are quoted directly, and the technical mechanism is clearly described.
- Ambiguities identified: There is some ambiguity regarding the exact number of unique individuals affected and the precise volume of CSAM generated versus suggestive content of minors.
- Alternative interpretations: None. The role of the AI system in generating the content is clear and undisputed.
Users leveraged xAI's Grok chatbot to generate and distribute thousands of nonconsensual sexualized deepfakes, including images of minors. While representing a severe violation of privacy and a major regulatory challenge, the incident does not directly threaten core national security infrastructure or state sovereignty, falling primarily under law enforcement and content moderation domains.
- Overall national security impact: Minor
- Scope: Multiple nations
- Primary target: No clear primary
- Other affected: United States, United Kingdom, France, India
- Alleged perpetrator: Unknown
Threat characteristics
- Imminence: Near-term. The situation requires ongoing monitoring and regulatory/law enforcement intervention to address the proliferation of illegal content.
- Autonomy: Human-controlled. The AI system acted as an assistant, generating content directly in response to specific user prompts and inputs.
- Novelty: Evolved capability. While deepfakes are an established threat, the automated generation of nonconsensual explicit content at this scale via commercial chatbot guardrail failures represents an evolved capability.
Impact by dimension
- Physical security: Negligible. No physical systems, critical infrastructure, or kinetic assets were targeted or affected in this incident.
- Information security: Minor. Deepfake generation targeted some politicians and high-profile individuals, but there is no evidence of a coordinated state-sponsored information warfare campaign.
- Sovereignty: Negligible. No disruption to core government operations, electoral systems, or state sovereignty was reported.
- Economic security: Negligible. The incident did not target financial systems or result in strategic technology theft, though it presents reputational risks for the platform.
- Societal stability: Minor. Widespread generation of nonconsensual sexual imagery and CSAM represents a severe violation of privacy and human rights, though manageable through standard law enforcement and regulatory frameworks.