AI Risk Wire

Cases › produced harmful content › LR-2026-0389

Boulder man arrested for AI-generated sexual images of children

Preliminary Why: Publisher not yet named · subject to change

Status: action reported, no fix

Severity moderate
Reported 30 Jan 2026

No source states: loss or records, developer and model, agent tool, could do, deployer, industry.

Severity moderate: test: data of others touched (photographs of real children altered) with a bounded scope stated (23 counts in the arrest warrant); no count of affected parties is stated.

A generative AI image tool on the PicsArt platform was reportedly used to alter photographs of real children into nude and sexually exploitative images. PicsArt flagged the account and images and reported the potential violations to NCMEC. The Colorado ICAC Task Force received information from NCMEC and sent the tip to the Boulder County Digital Forensics Lab, which identified a 72-year-old man as a suspect through court orders served on electronic service providers. A search warrant was served at his residence on January 15, 2026, and he was arrested on January 30, 2026 on a warrant for 23 counts of sexual exploitation of a child. The charges are accusations, and the defendant is presumed innocent. The sources do not state how many children or images were involved.

What happened

1 · What it was doingThe alleged misuse involved generative AI tools used to alter photographs of real children into nude and sexually exploitative images.
2 · How it was caughtThe PicsArt platform flagged the account and images and reported the potential violations to NCMEC.

What was done

A 72-year-old man was arrested on January 30, 2026 on a warrant for 23 counts of sexual exploitation of a child; the charges are accusations.

Risks

Read from the sources; not yet reviewed by a person.

Controls

Not yet read for controls. Controls that mitigate the primary risk:

Application

Data minimisation · Sensitive-data checks on outbound data · Human approval for high-impact actions · Output filtering and redaction · People told they are dealing with AI · Risk assessment per deployment

Infrastructure / target

Bot and scraping defences

Evidence

No source states: what went wrong, what it reached or did, when it happened, when it was found, how many records were exposed, the direct loss, a count of the other parties affected, any court case, the cause, what set it off.

Show the full account: 4 items from the primary sources

What happened, in order

  1. 2026-01-15 A search warrant was served at the suspect's residence in the City of Boulder.
  2. 2026-01-30 The suspect was arrested on an arrest warrant for 23 counts of sexual exploitation of a child.

Not dated in the sources:

  • PicsArt flagged the account and images and reported potential violations to NCMEC.
  • The Colorado ICAC Task Force received information from NCMEC and the investigation began.
Show every field, with its source and grade

What happened

Earliest source we hold
2026-01-30
D inferred by us from the described behaviour, reason shown
Who caught it
an outside party
C one secondary source states it
What went wrong
produced harmful content
D inferred by us from the described behaviour, reason shown
primary risk
RK15
D inferred by us from the described behaviour, reason shown

Impact

Severity
moderate
D inferred by us from the described behaviour, reason shown
Why this severity
test: data of others touched (photographs of real children altered) with a bounded scope stated (23 counts in the arrest warrant); no count of affected parties is stated.
D inferred by us from the described behaviour, reason shown

Notes on gaps

Charges are accusations and the defendant is presumed innocent.

LR-2026-0389 · version 1 · published 2026-11-01 after automatic checks; not yet checked field by field by a person · JSON