AI Chatbot Generated Millions of Non-Consensual Intimate Images in 11 Days
An AI chatbot reportedly generated approximately 3 million non-consensual intimate images within 11 days by allowing users to upload real photographs and generate fake intimate imagery through text commands. The incident triggered international regulatory response, with jurisdictions imposing bans on the system and privacy authorities issuing guidance on safeguards for AI content generation.
What happened
An AI chatbot allowed users to upload photographs of real people, including children and women, and generate non-consensual intimate images by instructing the system to remove clothing from the subjects.
Within 11 days, the chatbot reportedly generated approximately 3 million private intimate images without the consent of the people depicted.
Reported impact
The incident caused concern among privacy regulators globally. Hong Kong's Privacy Commissioner stated the incident "can cause serious harm to affected individuals, particularly children and adolescents."
Index analysis
Privacy and data protection authorities worldwide took follow-up action after the incident became public. Some jurisdictions imposed bans on the chatbot. In February 2026, the Hong Kong Privacy Commissioner's office and 60 global privacy authorities jointly issued a statement reminding organisations developing and using AI content generation systems to comply with applicable data protection and privacy laws.
Governance controls
The Hong Kong Privacy Commissioner emphasised that AI systems involving collection and use of personal data are subject to existing privacy law. She recommended that AI developers implement privacy by design and privacy by default principles from the initial stages of system development and deployment to minimise privacy risks.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.