InfoSecBulletin Cybersecurity for mankind
Nearly half of the high school’s female students were victimized in AI based deepfake the images and videos. The students and the parents were shocked at the incident while knowing the fact.
According to wgal, on November 8, Friday morning students of the school staged a walkout to protest of the administration’s handling of the private school’s ongoing artificial intelligence-generated nude photo scandal.
FBI investigating cyberattack at Oracle, Bloomberg News reports
OpenAI Offering $100K Bounties for Critical Vulns
Splunk Alert User RCE and Data Leak Vulns
CIRT alert Situational Awareness for Eid Holidays
Cyberattack on Malaysian airports: PM rejected $10 million ransom
Micropatches released for Windows zero-day leaking NTLM hashes
VMware Patches Authentication Bypass Flaw in Windows Tool
IngressNightmare
Over 40% of cloud environments are vulnerable to RCE
(CVE-2025-29927)
Urgently Patch Your Next.js for Authorization Bypass
Oracle refutes breach after hacker claims 6 million data theft
The shocking incident happened at Lancaster Country Day School, Coeducation in Lancaster, Pennsylvania in the United States.
Last month, a detective in a small town near Lancaster, Pennsylvania, invited many high school girls and their parents to the police station. One by one, the girls were asked to confirm if they appeared in numerous AI-generated deepfake pornographic images seized by the police.
Detective Laurel Bair of the Susquehanna Regional Police Department showed families only the girl’s face in a series of private meetings, revealing the full uncensored images only if requested.
“It made me a lot more upset after I saw the pictures because it made them so much more real for me,” one Lancaster victim, now 16, told Forbes. “They’re very graphic and they’re very realistic,” the mother said. “There’s no way someone who didn’t know her wouldn’t think: ‘that’s her naked,’ and that’s the scary part.” There were more than 30 images of her daughter.
Two teenage boys have been charged with multiple offenses, including 59 counts of “sexual abuse of children” and 59 counts of “possession of child pornography.” They allegedly obtained images from 60 girls’ public social media accounts and used them to create 347 AI-generated deepfake pornographic images and videos, according to the Lancaster County District Attorney’s Office.
“The number of victims involved in this case is troubling, and the trauma that they have endured in learning that their privacy has been violated in this manner is unimaginable.”
Forty-eight of the 60 victims were classmates from Lancaster Country Day School, a small private school about 80 miles west of Philadelphia. Almost half of the high school’s female students were affected by the deepfake pornography, making this the largest known case of such content involving minors in the U.S.
“The number of victims involved in this case is troubling, and the trauma that they have endured in learning that their privacy has been violated in this manner is unimaginable,” Heather Adams, the district attorney, said in the statement.
Last week, the Lancaster County District Attorney’s Office stated that all but one victim were under 18. Authorities believe the images were shared privately within the school community, not publicly posted online. Since the defendants are minors, prosecutors can’t share more details about them, and their parents haven’t commented.
This isn’t the first case of under-18 suspects being prosecuted for deepfake porn. Earlier this year, two middle school students in Miami were also arrested and charged for similar reasons.
Experts say that it is rare for criminal charges to be brought in deepfake pornography cases where both the victims and the perpetrators are minors.“My guess [as to why there aren’t more such prosecutions] is just that there may be a general recognition that arresting children isn’t going to resolve this,” Riana Pfefferkorn, a policy fellow at the Stanford Institute for Human-Centered Artificial Intelligence who has long studied the intersection of child sexual abuse material and AI, told Forbes.
In a similar deepfake porn case at a New Jersey school, no charges were filed, and the accused faced no academic or legal consequences. Dorotha Mani, a mother of one of the victims, expressed her frustration with the school’s leadership in a three-page testimony to Congress published in March.
Lancaster Country Day School administrators learned about deepfake images late last year, but parents and victims only discovered the issue earlier this year after a second allegation was reported. In November, students protested the school’s inadequate investigation of the AI-generated media. Many parents are now suing the school, claiming it failed to act and protect its students.
The school’s board of trustees stated in an email to Forbes that they take this situation seriously and have cooperated with law enforcement.
“It is not appropriate for us to comment on the specific charges brought against the two individuals by the authorities, and it is not our practice to publicly discuss information about former students,” the board said.
“What we can say is that caring for our community, supporting those who have been impacted by this upsetting situation, and reviewing the school’s policies about student safety remain our school’s highest priorities right now.”
