AI Risk Wire

Cases › other › LR-2026-0775

FBI and French authorities seize deepfake CSAM-for-sale websites

Preliminary Why: 1 report: CyberScoop · subject to change · 1 independent report

Developing: a major or severe case captured in the last 72 hours. Later changes are logged on the corrections page.

Status: no action reported

Severity major
Reported 7 Oct 2026

No source states: loss or records, developer and model, agent tool, could do, deployer, industry.

Severity major: Test: many third parties, a stated count of two or more affected parties. The source states 315 different girls in one collection.

Two websites, NudeLeaksTeens and NLTVIDS, were used to disseminate child sexual exploitation material, including AI generated deepfake media. The sites posted disclaimers disavowing child pornography while advertising and selling such material, and some of it came from victims' social media accounts. Law enforcement first became aware of the websites in 2024. The FBI seized and shut down the sites this week, and the French Paris Prosecutor's Office arrested an unnamed 25-year-old French resident suspected of being the primary administrator. Several victims reported to law enforcement that their accounts were hacked. The sources describe no AI agent involved in the sites' operation.

What happened

1 · What went wrongSome material was taken from victims' social media accounts, either recorded directly or stolen.
2 · What it reached or didOne collection held 189GB of material on 315 different girls and was sold for $64.90.
3 · How it was caughtLaw enforcement first became aware of the websites in 2024.

What was done

No source states an action or fix.

Risks

Manipulation and misinformation
Primary65 incidents

Sorted by rule from the case's fields; not yet read from the sources.

Controls

Not yet read for controls. Controls that mitigate the primary risk:

Model

Marking machine-made output · Abuse monitoring and account enforcement · Content safety classifiers

Application

People told they are dealing with AI

Infrastructure / target

Phishing and fraud filters

Similar incidents

Outsider Enterprise AI-assisted phishing-as-a-service takedown by FBI, Google and Black Lotus Labs2026-06-14
Chinese state-sponsored hacking group QTFY proxy network disrupted by FBI and DOJ2026-08-26

All cases of this kind ›

Evidence

No source states: what the AI was doing, when it happened, how many records were exposed, the direct loss, any court case, the cause, what set it off, what was done.

Show the full account: 5 items from the primary sources

What happened, in order

  1. 2022 and 2023 A collection named after Reuben Oswaldo Yeverino Rosales was for sale on one site; he was convicted and sentenced in 2022.
  2. 2024 Law enforcement first became aware of the websites.
  3. April 2026 Andrew Venegas was sentenced to 30 years in prison after a guilty plea; some collections were compiled by individuals serving sentences.
  4. Oct. 2 A seizure warrant was filed in the Eastern District of Virginia.

Not dated in the sources:

  • The French Paris Prosecutor's Office arrested an unnamed 25-year-old French resident suspected of being the primary administrator.
Show every field, with its source and grade

What happened

Earliest source we hold
2026-10-07
D inferred by us from the described behaviour, reason shown
What went wrong
other
D inferred by us from the described behaviour, reason shown

Impact

Other parties affected
315
C one secondary source states it
Severity
major
D inferred by us from the described behaviour, reason shown
Why this severity
Test: many third parties, a stated count of two or more affected parties. The source states 315 different girls in one collection.
D inferred by us from the described behaviour, reason shown

Notes on gaps

The date the incident occurred is not stated.

LR-2026-0775 · version 1 · published 2026-11-01 after automatic checks; not yet checked field by field by a person · JSON