Two male students at Lancaster Country Day School used AI tools to generate and share non-consensual deepfake pornographic images of over 50 female classmates, leading to severe psychological harm, school leadership resignations, lawsuits, and new state legislation.
From November 2023 through May 2024, two Lancaster Country Day School students in Pennsylvania allegedly used AI tools to create and exchange hundreds of sexualized deepfake images depicting female classmates and other girls. Authorities later identified 60 victims, 59 of them minors. The students were adjudicated delinquent in juvenile court, and families later sued the school and unnamed AI companies over the incident.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
Also classified as
The incident involved the creation and sharing of highly toxic synthetic child sexual abuse material (deepfake pornography) in a group chat.
The incident exposed significant regulatory and legal gaps, as existing child pornography laws did not cover synthetic AI-generated images, requiring new legislation (Act 125).
The students used AI to generate non-consensual sexual imagery of specific female classmates for targeted humiliation and harassment, which directly aligns with sub-domain 4.3 under Boundary Rule B1.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The harm was caused by the intentional actions of human users (students) who utilized a post-deployment AI tool to generate non-consensual deepfake pornography of their classmates.
Added categories peak at 3: Substantial (Child Sexual Exploitation & Abuse (CSEA), Direct)
Two high school students used consumer AI tools to generate non-consensual deepfake pornographic images of over 50 classmates. While causing severe localized psychological harm and prompting legislative action, the incident does not present a direct threat to national security, critical infrastructure, or state sovereignty.
The AI system was used as a tool by the students to perform a specific, well-defined function (generating deepfake images based on direct inputs of classmates' faces and nude bodies) without exhibiting autonomous planning or agency.
Limited Risk: The report describes the use of an AI program to generate deepfake images, which falls under the category of AI-generated content requiring specific transparency obligations under the EU AI Act.
The AI system was explicitly used to generate deepfake nude images of classmates by attaching their faces to nude bodies.
The reports provide consistent, detailed accounts of the incident across multiple local news sources, including details of the victims, the timeline, the school's response, the legal proceedings, and the legislative impact.
None.
Technology
Unsafeguarded AI Tools
AI platforms allowed generation of non-consensual deepfake pornography.
Lack of Platform Filters
AI companies failed to block generation of explicit material depicting minors.
Data Inputs
Use of Classmate Photos
Real faces of female students were harvested to train or seed the AI model.
Human Factors
Malicious Student Conduct
Male students intentionally generated explicit deepfakes of classmates.
Inadequate Parental Oversight
Parents failed to monitor children's online activities and use of AI tools.
Process and Methods
Flawed Internal Investigation
School dropped the initial probe after the suspect simply denied the claims.
Failure to Report Tip
School did not report the November 2023 tip to police or child services.
Management
Failure of Mandated Reporting
School leadership did not fulfill moral or legal duties to report abuse.
Lack of AI Misuse Policies
School handbook lacked explicit rules and discipline guidelines for AI misuse.
Regulatory Environment
Legal Loophole for AI CSAM
Existing laws did not define AI-generated images of minors as child abuse.
Delayed Legislative Action
Pennsylvania Act 125 was not yet in effect during the incidents.
AI system involved
An AI system was involved, but the reports do not identify it.
Identified by automated extraction; can differ from the alleged developers above.