Texas Man Arturo Hernandez Allegedly Published AI-Generated Deepfake Pornography Depicting Women in TAKE IT DOWN Act Case

DOJ alleged that Texas defendant Arturo Hernandez published about 113 albums of AI-generated deepfake pornography depicting about 50 identifiable women, including non-public figures and recent high school graduates, during a period anchored to May 2025. Prosecutors said non-explicit source images were allegedly transformed into sexualized depictions. The case was among the first prosecutions announced under the TAKE IT DOWN Act.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The defendants used generative AI to create humiliating and sexually explicit imagery of specific, identifiable victims without their consent for distribution on adult platforms.

Additional risk subdomains

• 1.2 Exposure to toxic content: The generated nonconsensual deepfake pornography was published on public websites and viewed millions of times, exposing internet users to toxic and abusive content.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The harm was caused by the intentional decisions and actions of human defendants who used deployed generative AI tools to create and distribute nonconsensual deepfake pornography.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The incident involves AI-generated content such as deepfakes, which are subject to specific transparency obligations under the EU AI Act to ensure users are aware they are interacting with synthetic media.

AI system and alleged parties

• AI system: unspecified
• AI purpose: Deepfake Image Generation; Deepfake Video Generation
• Behaviour type: Tool
• Alleged developer: Deepfake technology developers
• Alleged deployer: Deepfake creators, Arturo Hernandez
• Alleged harmed parties: Women, Victims of deepfake abuse, public figures, Epistemic integrity, celebrities

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Minor, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Minor, indirect Negligible
• Psychological: direct Minor, indirect Negligible
• Epistemic: direct Minor, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Malicious content

Reported: Yes, the report explicitly describes the creation and distribution of thousands of nonconsensual deepfake pornographic images and videos.

Directly caused: The defendants generated and published at least 473 albums of explicit deepfake pornography which were viewed millions of times online.

Civil rights

Reported: Yes, the report explicitly states that the conduct violated the victims' privacy, dignity, and security.

Directly caused: The nonconsensual sexualization of approximately 140 women violated their fundamental rights to personal dignity, privacy, and bodily autonomy.

Privacy

Reported: Yes, the report explicitly states the conduct 'violates their privacy, dignity, and security' and involves 'nonconsensual publication of intimate images'.

Directly caused: The defendants violated the privacy of approximately 140 women by using their likenesses to generate and publish nonconsensual intimate images.

Psychological

Reported: Yes, the report explicitly describes psychological, reputational, and emotional abuse and harm inflicted on the victims.

Directly caused: The nonconsensual creation and distribution of explicit deepfakes caused severe emotional distress, degradation, and psychological abuse to approximately 140 female victims.

Inferred additional harm: It is highly likely that the victims suffered long-term trauma, anxiety, and social distress due to the widespread online dissemination of these explicit digital forgeries.

Epistemic

Reported: Yes, the report describes the creation of digital forgeries (deepfakes) that falsely depict real people engaging in sexual acts.

Directly caused: The defendants generated thousands of realistic, fabricated images and videos falsely depicting 140 women in sexually explicit scenarios.

People affected

• Occurrences reported: 2
• People reportedly harmed: 140
• People reportedly exposed: 140

Potential causes

Management

• Lack of Platform Safeguards: Platform management failed to establish robust content removal policies.

Technology

• Sophisticated Generative AI Tools: Sophisticated tools allow easy generation of explicit deepfakes.
• Inadequate Image Morphing Guards: AI tools allowed morphing clean photos into explicit images.

Data Inputs

• Unauthorized Use of Real Photos: Defendants used real photos of victims to train or prompt AI.
• Access to Public Images: Publicly available images of victims were exploited by AI tools.

Human Factors

• Predatory Intent of Creators: Defendants deliberately created deepfakes to degrade victims.
• Lack of Respect for Consent: Creators ignored victim consent when publishing intimate media.

Process and Methods

• Inadequate Platform Moderation: Platforms failed to filter and block deepfake content uploads.
• Easy Online Distribution: Websites allowed easy sharing and viewing of explicit material.

Regulatory Environment

• Historical Regulatory Gaps: Lack of strict laws historically allowed deepfake spread before new acts.
• Platform Compliance Failures: Some platforms failed to implement active removal processes.

Information quality

• Classification confidence: High
• Reason for confidence: The reports provide clear, detailed factual accounts of the arrests, the specific charges, the number of albums and victims involved, and the legal context surrounding the TAKE IT DOWN Act.
• Ambiguities identified: The specific generative AI models or platforms used by the defendants to create the deepfakes are not identified.

Federal prosecution of two U.S. citizens for generating and distributing nonconsensual deepfake pornography of 140 women, including political figures and celebrities, under the TAKE IT DOWN Act. While the incident caused severe psychological harm and privacy violations, its national security impact is minor, representing a domestic criminal matter managed by law enforcement.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Cornelius Shannon and Arturo Hernandez

Threat characteristics

• Imminence: Long-term. Represents an ongoing strategic concern regarding the proliferation of generative AI tools rather than an active, unresolved crisis.
• Autonomy: Human-controlled. The defendants intentionally operated generative AI tools to create specific synthetic media, with no autonomous AI decision-making.
• Novelty: Evolved capability. Represents a significant advancement in the accessibility and realism of consumer-grade deepfake tools, establishing a new federal prosecution precedent.

Impact by dimension

• Physical security: Negligible. No physical systems, critical infrastructure, or kinetic targeting capabilities were affected in this incident.
• Information security: Minor. Deepfakes targeted political figures, but the activity was a domestic criminal enterprise rather than a state-sponsored disinformation or intelligence operation.
• Sovereignty: Negligible. No foreign intervention or disruption to core government functions or electoral systems was observed.
• Economic security: Negligible. No strategic technology theft, critical supply chain disruption, or financial system manipulation occurred.
• Societal stability: Minor. Severe privacy violations and psychological harm inflicted on 140 victims, including public figures, but managed through standard domestic law enforcement procedures.