A man was sentenced to nine years in prison for creating and distributing non-consensual deepfake pornography of 26 women, including friends and colleagues. The perpetrator used AI to superimpose victims' faces onto violent pornographic images and shared them online alongside personal details and rape fantasies. The case highlights the severe psychological harm caused by AI-enabled image-based abuse and the challenges victims face in seeking legal recourse.
Australian teacher Hannah Grundy discovered her face had been superimposed onto pornographic images using AI deepfake technology, which were shared online alongside personal details. A former trusted friend, Andrew Thomas Hayler, was found responsible, targeting 26 women, including Grundy and close friends, over two years. Hayler pleaded guilty to multiple charges and was sentenced to nine years in prison.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
Also classified as
The incident involved the creation and online distribution of highly toxic, violent, and sexually explicit content depicting rape fantasies.
The perpetrator used AI to create humiliating and sexual deepfake imagery of specific victims to harass and degrade them.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The incident was caused by a human actor intentionally using deployed AI deepfake generation tools to harass and abuse victims.
Added categories peak at 2: Minor (Psychological Harm, Direct)
An Australian man was sentenced to nine years in prison for creating and distributing non-consensual deepfake pornography of 26 women. While the incident represents a severe, harmful violation of individual privacy and human rights, it remains a localized criminal matter with negligible national security implications.
The reports describe the perpetrator using AI technology to superimpose faces onto pornographic images. The AI operated as a tool, performing specific image-generation functions based on direct human inputs without autonomous planning or agency.
Limited Risk: The incident involves AI-generated content such as deepfakes, which under the EU AI Act are classified as limited risk, requiring transparency obligations.
The AI system was used specifically to generate non-consensual deepfake pornographic images and videos of the victims by superimposing their faces onto explicit content.
The reports provide consistent, detailed accounts of the perpetrator's actions, the legal proceedings, the sentencing, and the specific impacts on the victims. Multiple reputable news sources corroborate the facts of the case.
None. The facts of the criminal case and the role of deepfake technology are clear and undisputed.
Technology
Accessible Deepfake AI Tools
AI technology allowed easy superimposing of faces onto graphic images.
Realistic AI Graphic Editing
AI added realistic details like bruising to make images highly disturbing.
Data Inputs
Social Media Image Scraping
Private social media photos were downloaded and used as inputs for AI models.
Human Factors
Perpetrator Psychological Issues
Addictions to violent porn and substances fueled the malicious behavior.
Misperception of Online Harm
Perpetrator dismissed the severe real-world impact as just online harm.
Abuse of Interpersonal Trust
A close friend exploited his access to victims' private profiles.
Process and Methods
Inadequate Initial Police Response
Police initially dismissed evidence, delaying arrest and prolonging trauma.
Lack of Platform Content Moderation
The host website allowed graphic non-consensual deepfakes and rape polls.
Manual Forensic Requirements
Victims had to spend $20,000 on private investigators to prove the crime.
Management
Unregulated Hosting Platforms
Forum operators failed to manage and moderate illegal user-uploaded content.
Inadequate Social Media Privacy
Social platforms failed to prevent friends from downloading private photos.
Regulatory Environment
Gaps in Cyber Abuse Legislation
Initial lack of specific laws for AI-generated non-consensual pornography.
Slow Law Enforcement Action
Lack of established protocols for handling digital image-based abuse cases.
AI system involved
An AI system was involved, but the reports do not identify it.
Identified by automated extraction; can differ from the alleged developers above.