Reported Use of AI Apps to Create Sexualized Deepfake Images of High School Students at Cascade High School in Iowa

Students of the Western Dubuque Community School District in Iowa reported that classmates allegedly used AI-enabled applications to generate sexualized deepfake images depicting fellow students. According to local reporting and the Dubuque County Sheriff's Office, the fabricated images were created and shared without consent. The school district reportedly held a public session to address policy gaps and student support following the incident.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involved classmates using AI to create humiliating sexual imagery targeting specific female students, which fits the boundary rule for targeted humiliation under 4.3.

Additional risk subdomains

• 1.2 Exposure to toxic content: The creation of non-consensual synthetic pornography exposes the victims and school community to highly toxic and inappropriate content.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The harm was caused by classmates intentionally using deployed AI applications to generate non-consensual deepfake nude images of female students.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The AI system was used to generate deepfakes (AI-generated content), which falls under Risk Level 3 due to transparency obligations regarding synthetic media.

AI system and alleged parties

• AI system: AI-enabled applications
• AI purpose: Deepfake Image Generation; Image Generation
• Behaviour type: Tool
• Alleged developer: Unknown image generator developers, Unknown deepfake technology developers
• Alleged deployer: Unnamed students at Western Dubuque Community School District
• Alleged harmed parties: Unnamed students at Western Dubuque Community School District, students, minors, Families of unnamed students at Western Dubuque Community School District, Epistemic integrity

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Negligible
• Differential treatment: direct Minor, indirect Minor
• Civil rights: direct Minor, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Minor, indirect Negligible
• Psychological: direct Minor, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Substantial, indirect Negligible

Malicious content

Reported: The report explicitly describes fake nude photos created using AI.

Directly caused: Classmates generated fake nude photos of several female students. The exact number of images is unknown.

Inferred additional harm: It is likely that these images were shared among other students in the school community, exposing a wider circle of teenagers to non-consensual sexual content.

Differential treatment

Reported: The report explicitly describes female students being targeted and feeling alienated by the school's response.

Directly caused: Female students were specifically targeted for sexualized deepfakes.

Indirectly caused: Victims felt silenced and alienated by school staff who prohibited talking about the incident, and felt that counseling access was structured in a way that would 'make a scene'.

Civil rights

Reported: The report explicitly describes students fighting for 'what is right' and feeling violated, which touches on personal dignity and privacy rights.

Directly caused: The creation of non-consensual sexual imagery violated the victims' rights to personal dignity, privacy, and bodily autonomy.

Privacy

Reported: The report explicitly describes the violation of the students' privacy through the creation of fake nude photos.

Directly caused: The students' likenesses were used without consent to generate sexualized images, violating their personal privacy.

Psychological

Reported: The report explicitly describes psychological distress, feeling violated, disgusted, and afraid of being judged.

Directly caused: Several female students experienced severe emotional distress, feeling violated, and anxiety about their reputation and future.

Inferred additional harm: It is highly likely that the victims suffered long-term anxiety, trauma, and social isolation requiring ongoing psychological support, affecting at least 4 identified students and potentially more unidentified victims.

Child sexual exploitation and abuse

Reported: The report explicitly describes the creation of fake nude photos of high school students (minors) using AI.

Directly caused: Classmates used AI apps to generate fake nude photos of female high school students, which constitutes AI-generated child sexual abuse material (CSAM) or child sexual exploitation and abuse (CSEA).

Inferred additional harm: It is possible that these images of minors were saved, distributed online, or ended up on external platforms, expanding the scale of child sexual exploitation.

People affected

• Occurrences reported: 1
• People reportedly harmed: 4
• People reportedly exposed: 4

Potential causes

Management

• Inadequate District Support: School administration failed to proactively reach out and support victims.
• Poor Communication with Parents: Parents demanded accountability and better communication from the district.

Technology

• AI Image Generation Apps: AI apps allowed easy creation of fake nude photos of classmates.
• Lack of AI Generation Filters: AI tools lacked restrictions preventing non-consensual nude generation.

Data Inputs

• Public Social Media Photos: Prom and social media photos of students were harvested as input data.

Human Factors

• Malicious Intent by Peers: Classmates intentionally targeted female students to violate and humiliate.
• Fear of Peer Judgment: Victims delayed reporting the incident due to fear of social backlash.

Process and Methods

• Outdated School Policies: Existing policies failed to address AI-generated harassment and abuse.
• Inaccessible Counseling Process: Counseling required leaving class, causing embarrassment for victims.
• Silencing of Discussion: Teachers banned talking about the incident, alienating the victims.

Regulatory Environment

• Unprepared Law Enforcement: AI-generated imagery is new to law enforcement, hindering legal action.

Information quality

• Classification confidence: High
• Reason for confidence: The report clearly details the nature of the incident, the impact on the victims, and the community's response. While the specific AI applications used are not named, the role of AI in generating the deepfakes is explicitly established.
• Ambiguities identified: The specific AI apps used and the exact number of victims and generated images are not specified.
• Alternative interpretations: None. The incident is clearly a case of non-consensual deepfake generation targeting high school students.

High school students in Iowa used consumer AI applications to generate non-consensual sexualized deepfakes of classmates. While the incident represents a severe violation of privacy and local school policies, its national security implications are negligible, as it remains a localized cyber-harassment issue handled by local law enforcement.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Classmates at Cascade High School

Threat characteristics

• Imminence: Long-term. This reflects an ongoing strategic and societal concern regarding the proliferation of consumer deepfake tools rather than an active national security crisis.
• Autonomy: Human-controlled. The AI applications were directly operated as tools by individuals to generate specific images, with no autonomous decision-making by the AI.
• Novelty: Established threat. The generation of non-consensual deepfakes using readily available AI applications is a well-documented and recurring issue globally.

Impact by dimension

• Physical security: Negligible. No physical threat, kinetic attacks, or critical infrastructure compromise occurred during this localized high school incident.
• Information security: Negligible. The incident involves local cyber-harassment and does not constitute state-sponsored information warfare, intelligence compromise, or systematic disinformation.
• Sovereignty: Negligible. Core government operations, sovereignty, and constitutional processes were entirely unaffected by this local school-level event.
• Economic security: Negligible. No strategic technology theft, financial systems attack, or threat to national economic competitiveness is associated with this incident.
• Societal stability: Minor. The creation of non-consensual sexualized deepfakes of minors violates personal privacy and dignity, but the impact is localized and manageable by local law enforcement and school administrators.