AI Risk Wire

Cases › produced harmful content › LR-2026-0770

KOP Mall worker accused of upskirt photos and AI child sexual abuse material

Preliminary Why: Publisher not yet named · subject to change

Status: action reported, no fix

Severity moderate
Reported 23 Oct 2026

No source states: loss or records, developer and model, agent tool, could do, deployer, industry.

Severity moderate: Test: data or systems of others touched, with a bounded scope stated. Fact: victims' photos and videos were taken at the King of Prussia Mall, parks, a zoo, convenient stores, and an aquarium, per the criminal complaint.

The system involved is Grok, an AI app that police say a worker at the King of Prussia Mall used to create child pornography from a photo of a teen girl. Robert Mayberry, 41, is charged with multiple counts including child sexual abuse material and invasion of privacy. The investigation began on June 18, 2026, when a woman contacted West Goshen Police after seeing photos and videos on his cellphone. Investigators searched his seized devices between June 26 and Aug. 14 and found hundreds of AI-generated child sexual abuse videos and photos, along with over 150 upskirt videos of women and teen girls. Mayberry was arrested on Oct. 21, 2026, and posted bail. Therabody said the employee had been placed on leave. The sources do not describe any control in the AI app that held, failed or was bypassed.

What happened

1 · What it was doingA worker at the mall is accused of taking upskirt photos and using AI to create child sexual abuse material.

What was done

Mayberry was arrested on Oct. 21, 2026, and posted bail.

Risks

Harmful content and jailbreaks
Primary
84 incidents
Rising: 6 vs 3.8 a week

Sorted by rule from the case's fields; not yet read from the sources.

Controls

Not yet read for controls. Controls that mitigate the primary risk:

Model

Safety training and refusal · Content safety classifiers · Abuse monitoring and account enforcement · Outside red-teaming

Application

Output filtering and redaction

Evidence

No source states: what went wrong, what it reached or did, how it was caught, when it happened, how many records were exposed, the direct loss, a count of the other parties affected, any court case, the cause, what set it off.

Show the full account: 5 items from the primary sources

What happened, in order

  1. 2026-06-18 A woman contacted West Goshen Police and the investigation began.
  2. Between June 26 and Aug. 14 Investigators searched the seized devices and found hundreds of AI-generated child sexual abuse videos and photos.
  3. 2026-10-21 Mayberry was arrested and posted bail.
  4. 2026-10-23 NBC10 contacted Therabody to confirm whether Mayberry was still employed at the store.
  5. 2026-10-30 Mayberry's next preliminary hearing is scheduled.
Show every field, with its source and grade

What happened

Earliest source we hold
2026-10-23
D inferred by us from the described behaviour, reason shown
Who caught it
an outside party
C one secondary source states it
When it was found
2026-06-18
C one secondary source states it
What went wrong
produced harmful content
C one secondary source states it

Impact

Severity
moderate
D inferred by us from the described behaviour, reason shown
Who was affected
Women and teen girls photographed without consent at the King of Prussia Mall, parks, a zoo, convenient stores, and an aquarium, according to the criminal complaint.
C one secondary source states it
Why this severity
Test: data or systems of others touched, with a bounded scope stated. Fact: victims' photos and videos were taken at the King of Prussia Mall, parks, a zoo, convenient stores, and an aquarium, per the criminal complaint.
D inferred by us from the described behaviour, reason shown

Notes on gaps

The Therabody leave is an employment action, not a remediation to the system, so remediations is empty.

LR-2026-0770 · version 1 · published 2026-11-01 after automatic checks; not yet checked field by field by a person · JSON