AI Risk Wire

Cases › other › LR-2026-0656

Lancaster Country Day sued over students' AI deepfakes of peers

Preliminary Why: Publisher not yet named · subject to change

Developing: a major or severe case captured in the last 72 hours. Later changes are logged on the corrections page.

Status: no action reported

Severity major
Reported 27 Jul 2026

No source states: loss or records, developer and model, agent tool, could do, deployer, industry.

Severity major: Test: many third parties (a stated count of two or more affected parties). Fact: the lawsuit names 59 female students whose protection is claimed.

Two former students of Lancaster Country Day School, a K-12 school in Manheim Township, made approximately 350 deepfake nude images of 59 female students, according to a federal lawsuit filed on behalf of 13 unnamed victims. The complaint says an anonymous tip about the images reached the school in November 2023 through the state Attorney General's Safe2Say Something program, and that the school did not notify law enforcement, so more images were created and distributed before a parent report reached police in May 2024. The school disputes this: its lawyers filed a motion to dismiss, arguing the Attorney General's office had discretion to refer the tip and that the school had no legal duty to report. The district attorney confirmed the school did not notify law enforcement or file a ChildLine report but declined to file charges. The former students were ordered to serve probation and community service.

What happened

1 · What it was doingTwo former students made approximately 350 deepfake nude images of classmates, according to the lawsuit.

What was done

No source states an action or fix.

Risks

Sorted by rule from the case's fields; not yet read from the sources.

Controls

Not yet read for controls. Controls that mitigate the primary risk:

Model

Marking machine-made output · Abuse monitoring and account enforcement · Content safety classifiers

Application

People told they are dealing with AI

Infrastructure / target

Phishing and fraud filters

Evidence

No source states: what went wrong, what it reached or did, how it was caught, when it happened, when it was found, how many records were exposed, the direct loss, any court case, the cause, what set it off, what was done.

Show the full account: 6 items from the primary sources

What happened, in order

  1. November 2023 School received an anonymous tip about the deepfake images through the Attorney General's Safe2Say program.
  2. November 2023 Country Day conducted its own investigation of the tip, interviewing a named student and his mother.
  3. May 2024 Parent report received by Manheim Township Police Department.
  4. December 2024 District attorney confirmed the school did not notify law enforcement or file a ChildLine report, and declined to file charges.
  5. June Civil complaint filed in federal court on behalf of 13 unnamed victims and their parents.

Not dated in the sources:

  • School's lawyers filed a motion to dismiss the federal lawsuit.
Show every field, with its source and grade

What happened

Earliest source we hold
2026-07-27
D inferred by us from the described behaviour, reason shown
What went wrong
other
D inferred by us from the described behaviour, reason shown

Impact

Other parties affected
59
C one secondary source states it
Severity
major
D inferred by us from the described behaviour, reason shown
Why this severity
Test: many third parties (a stated count of two or more affected parties). Fact: the lawsuit names 59 female students whose protection is claimed.
D inferred by us from the described behaviour, reason shown

Notes on gaps

The 59 count is the number the lawsuit says the school failed to protect, and the 13 victims are the plaintiffs; both are allegations. No remediation by the school is reported in the sources. The motion to dismiss was filed on a Monday and the article dates are 2026-07-27 and 2026-07-28, so the exact motion date is not fixed.

LR-2026-0656 · version 1 · published 2026-11-01 after automatic checks; not yet checked field by field by a person · JSON