Alleged Use of AI to Create Sexualized Deepfake Images of Middle School Students Under Investigation in Bucks County, Pennsylvania

Authorities in Bucks County, Pennsylvania reported that a middle school student allegedly used AI-enabled tools to create sexualized deepfake images depicting classmates. The incident, which reportedly occurred in March 2025, involved images generated without consent and is under investigation by local police and the district attorney's office. The alleged conduct may fall under a new Pennsylvania law addressing non-consensual AI-generated sexual imagery, particularly involving minors.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The student used AI tools to generate non-consensual pornographic deepfakes of specific classmates, which represents targeted harassment and humiliation of specific victims.

Additional risk subdomains

• 1.2 Exposure to toxic content: The incident involved the creation of pornographic deepfake images of minors, exposing them and potentially others to highly toxic and sexually explicit content.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was caused by a human user (a student) intentionally using a deployed AI tool to generate non-consensual deepfake images of classmates.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The system is used to generate AI-generated content such as deepfakes, which falls under the transparency obligations of Limited Risk (Level 3).

AI system and alleged parties

• AI system: AI-enabled tools
• AI purpose: Deepfake Image Generation; Image Generation
• Behaviour type: Tool
• Alleged developer: Unknown image generator developers, Unknown deepfake technology developers
• Alleged deployer: Unnamed middle school student in Pennsylvania
• Alleged harmed parties: Unnamed middle school students in Pennsylvania, students, minors, Epistemic integrity

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Minor, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Substantial, indirect Negligible

Malicious content

Reported: The report explicitly describes the creation of pornographic deepfake images of 12 underage girls.

Directly caused: A student used AI technology to generate non-consensual pornographic deepfake images of 12 classmates.

Inferred additional harm: It is possible that these images were shared among other students or online, potentially exposing a wider audience to this toxic content.

Privacy

Reported: The report describes how a student used photos of 12 classmates to create phony nude images without their consent.

Directly caused: The student violated the privacy of 12 classmates by using their personal photos to generate non-consensual sexualized deepfakes.

Child sexual exploitation and abuse

Reported: The report explicitly describes an incident where a middle school student used AI to create pornographic deepfake images of 12 underage classmates.

Directly caused: The student generated non-consensual pornographic deepfake images of 12 minor classmates.

People affected

• Occurrences reported: 1
• People reportedly harmed: 12
• People reportedly exposed: 12

Potential causes

Management

• Reactive school administration: Schools develop policies only after an incident occurs rather than proactively.
• Lack of staff policy awareness: Over half of teachers were unaware of existing district policies on deepfakes.

Technology

• Accessibility of AI tools: AI generation tools are easily accessible to minors to create realistic images.
• Lack of generation safeguards: AI tools lack built-in restrictions to prevent generating non-consensual porn.

Data Inputs

• Use of classmates' real photos: Real photos of victims were easily obtained and fed into the AI generator.

Human Factors

• Student intent to harass: A student intentionally chose to target and harass classmates using deepfakes.
• Peer behavior and pressure: High prevalence of students sharing non-consensual sexual images of peers.

Process and Methods

• Lack of school victim assistance: Schools failed to provide adequate resources or support to deepfake victims.
• Inadequate school prevention policies: Most schools lacked policies or procedures to address deepfake image sharing.

Regulatory Environment

• Lagging federal legislation: Federal laws like the Take It Down Act were only recently enacted or proposed.
• Inconsistent state laws: State laws criminalizing deepfakes are relatively new and not fully enforced.

Information quality

• Classification confidence: High
• Reason for confidence: The report clearly details the nature of the incident, the number of victims (12), the location, and the ongoing police investigation. The role of the AI as a deepfake generator is explicit.
• Ambiguities identified: It is not known if the images were shared with others or available online, or which specific AI tool was used.

A middle school student in Pennsylvania used AI to generate non-consensual sexualized deepfakes of 12 classmates. While representing a severe violation of individual privacy and student safety, the incident is a localized law enforcement and school policy matter with negligible implications for national security.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Individual

Threat characteristics

• Imminence: Long-term. The incident does not pose an active national security crisis, representing instead an ongoing regulatory and societal challenge regarding AI policy.
• Autonomy: Human-controlled. The AI system was used strictly as a tool by a human operator to generate specific media, with no autonomous decision-making.
• Novelty: Established threat. The use of AI tools to generate non-consensual deepfakes is an established and recurring issue with existing legal precedents.

Impact by dimension

• Physical security: Negligible. The incident involves localized deepfake creation and poses no threat to physical systems, critical infrastructure, or human safety.
• Information security: Negligible. No intelligence compromise, classified data theft, or nation-state information warfare operations are associated with this incident.
• Sovereignty: Negligible. Core government operations, electoral systems, and state sovereignty remain entirely unaffected by this local school incident.
• Economic security: Negligible. There is no impact on strategic industries, financial systems, or national technological competitive advantage.
• Societal stability: Minor. The incident represents a serious violation of privacy and personal dignity for 12 minors, but the impact is localized and manageable under existing state laws and standard school procedures.