Purportedly AI-Altered Fake Nude Images of High School Girls and Women Reportedly Created and Disseminated in Pensacola, Florida

In Pensacola, Florida, an 18-year-old man allegedly used an online AI image-alteration application to digitally "undress" photos of dozens of girls and young women without their consent, creating realistic fake nude images. Some source photos were reportedly taken when the victims were minors. The images were reportedly discovered on the man's phone and subsequently copied and shared with other students by a third party, prompting a police investigation and arrest.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The AI system was used by a malicious actor to create humiliating and sexualized deepfake imagery of specific victims without their consent.

Additional risk subdomains

• 1.2 Exposure to toxic content: The victims and other high school students were exposed to non-consensual, sexually explicit synthetic content.
• 6.5 Governance failure: Existing legal and regulatory frameworks failed to address the creation and possession of non-consensual AI-generated sexual imagery, leaving a significant loophole.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The incident was caused by a human user intentionally choosing to use an AI application to generate non-consensual nude images of victims.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The report describes an AI system used for generating AI-altered content (deepfakes), which carries specific transparency obligations under the Act.

AI system and alleged parties

• AI system: online AI image-alteration application
• AI purpose: Deepfake Image Generation; Image Retouching
• Behaviour type: Tool
• Alleged developer: Unknown image generator developers, Unknown deepfake technology developers
• Alleged deployer: Unnamed 18-year-old male student from Pensacola
• Alleged harmed parties: Unnamed students from Pensacola, students, minors, Epistemic integrity

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Minor
• Differential treatment: direct Minor, indirect Minor
• Civil rights: direct Minor, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Minor, indirect Minor
• Psychological: direct Minor, indirect Minor
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Substantial, indirect Negligible

Malicious content

Reported: The report explicitly describes toxic and malicious content created and spread directly and indirectly by the incident.

Directly caused: An 18-year-old created over 175 fake nude photos of dozens of local girls using an AI undressing app.

Indirectly caused: A 17-year-old girl copied and disseminated a video of these images to 17 high school students.

Inferred additional harm: It is possible that these images were uploaded to other online platforms or the dark web, potentially exposing them to a wider audience.

Differential treatment

Reported: The report explicitly describes gender-based targeting and concerns of sexism in law enforcement.

Directly caused: The AI app was used specifically to target and sexualize young women and girls, representing gender-based harassment.

Indirectly caused: Victims' families raised concerns of sexism because the female who shared the photos was arrested while the male creator faced no charges.

Civil rights

Reported: The report explicitly describes violations of personal dignity and bodily autonomy.

Directly caused: The victims' rights to bodily autonomy and personal dignity were violated by having their likenesses sexualized without consent.

Privacy

Reported: The report explicitly describes privacy violations caused directly and indirectly by the incident.

Directly caused: The creator violated the privacy of dozens of girls by downloading their public social media photos and using AI to generate highly realistic nude depictions.

Indirectly caused: The ex-girlfriend further violated privacy by copying and distributing the images to other students.

Inferred additional harm: There are concerns that these private, highly sensitive altered images may have been shared on other online databases or the dark web.

Psychological

Reported: The report explicitly describes psychological harm to the victims and their families caused directly by the incident.

Directly caused: Dozens of young women experienced shock, horror, embarrassment, shame, stress, and trauma upon discovering realistic fake nude photos of themselves.

Indirectly caused: Parents experienced distress, anger, and worry over the emotional toll and potential future impact on their daughters' reputations and careers.

Inferred additional harm: It is highly likely that other victims among the 30 to 50 affected young women who did not speak to the media also suffered similar trauma, anxiety, and long-term psychological distress.

Child sexual exploitation and abuse

Reported: The report explicitly describes a potential CSEA incident investigated by law enforcement.

Directly caused: The AI system was used to generate sexually explicit altered images of minors, which police investigated as potential child pornography.

Inferred additional harm: If these AI-generated nude images of minors were uploaded online, they could constitute further dissemination of CSAM-like material.

People affected

• Occurrences reported: 1
• People reportedly harmed: 30
• People reportedly exposed: 30

Potential causes

Technology

• AI Undressing App Availability: Online apps easily allow users to create fake nude pictures from photos.
• Highly Realistic AI Generation: AI models generate highly realistic nude images, causing severe distress.
• Lack of App Safeguards: The app lacked verification mechanisms to prevent non-consensual generation.

Data Inputs

• Scraping of Social Media Photos: Publicly posted social media images were downloaded to feed the AI app.
• Lack of Image Protection: Social platforms lacked safeguards to prevent downloading and AI manipulation.

Human Factors

• Malicious User Intent: The creator intentionally used AI to sexualize and violate victims' privacy.
• Unauthorized Dissemination: An acquaintance copied and distributed the AI images to high school students.

Process and Methods

• Inadequate Device Investigation: Law enforcement did not seize the creator's phone to check for sharing.

Regulatory Environment

• Deepfake Law Loopholes: Florida law requires dissemination to prosecute, leaving creation unpunished.
• Outdated Cyber Laws: State laws have not kept pace with rapid advancements in generative AI.
• Absence of App Regulation: No regulations exist to stop the creation or hosting of undressing websites.

Information quality

• Classification confidence: High
• Reason for confidence: The reports provide consistent, detailed accounts from multiple victims, parents, and law enforcement representatives regarding the creation and dissemination of the AI-generated images, as well as the legal challenges faced.
• Ambiguities identified: The exact number of victims is slightly inconsistent between reports (14 vs 30-50), and the specific AI application used is not named.

An 18-year-old student in Florida used an AI-powered undressing application to create non-consensual nude images of dozens of local females, highlighting significant legal loopholes in addressing synthetic sexual imagery. While causing severe personal harm, the national security impact is minor, representing localized privacy violations and highlighting regulatory gaps in managing consumer-accessible deepfake technologies.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: An 18-year-old high school student

Threat characteristics

• Imminence: Long-term. The incident represents an ongoing strategic concern regarding regulatory gaps and the proliferation of deepfake technology rather than an active crisis.
• Autonomy: Human-controlled. The AI application operated as a tool directly controlled and initiated by a human user to generate specific images.
• Novelty: Evolved capability. While deepfakes are an established threat, the widespread accessibility of user-friendly AI undressing tools represents an evolved, highly accessible risk vector.

Impact by dimension

• Physical security: Negligible. No physical systems, critical infrastructure, or physical safety threats were involved in this incident.
• Information security: Negligible. The incident involved localized personal deepfakes targeting individuals, with no intelligence compromise or state-level information warfare operations.
• Sovereignty: Negligible. No disruption to government decision-making, elections, or state sovereignty occurred.
• Economic security: Negligible. No impact on strategic technologies, financial systems, or national economic security.
• Societal stability: Minor. The incident represents localized violations of personal privacy and bodily autonomy through non-consensual AI-generated imagery, but lacked population-scale impact.