The National Center for Missing & Exploited Children received 1.5 million reports of suspected child sexual abuse material with AI connections in 2025, marking a dramatic 22-fold increase from 67,000 reports in 2024.
The spike in AI-related child sexual abuse material (CSAM) reports underscores growing concerns about generative AI technology enabling the creation and distribution of exploitative content.
NCMEC's figures reveal an exponential trajectory. Reports jumped from 4,700 in 2023 to 67,000 in 2024, then skyrocketed to 1.5 million in 2025. The organization, which operates the CyberTipline—a national reporting mechanism for online child exploitation—processed the overwhelming majority of these cases.
The surge reflects both increased use of AI tools to generate synthetic abuse material and improved detection systems flagging suspicious content. Generative AI platforms have made image creation more accessible, and bad actors have exploited these tools to produce deepfakes and synthetic imagery depicting minors.
Law enforcement and child safety advocates have raised alarms about the challenge of distinguishing AI-generated content from authentic material, complicating investigations and prosecutions. The reports also include cases where AI was used to facilitate grooming or distribute existing abuse material more widely.
Tech companies face mounting pressure to implement stronger safeguards. Major AI providers have added restrictions on generating sexually explicit content involving minors, but enforcement remains inconsistent across platforms. Some services still lack adequate detection systems.
The NCMEC data suggests the problem is outpacing regulatory and technical responses. Congress has considered legislation targeting AI-generated CSAM, but no comprehensive federal law specifically addresses synthetic abuse material. State-level efforts vary widely in scope and enforcement.
Child safety groups emphasize that while AI-generated content differs from documented abuse of real children, it normalizes exploitation and can fuel demand for authentic material. The trend signals an urgent need for coordinated action among technology developers, platforms, law enforcement, and policymakers to prevent further escalation.
The Los Angeles Police Department has allowed its contract with surveillance company Flock to expire, citing serious civil liberties and privacy concerns. The move marks a significant departure for one of Flock's largest government customers.
Lidl has notified customers across Germany, Belgium, and the Netherlands that their personal information was compromised in a breach targeting a third-party service provider.
A user reported that Grok, xAI's AI chatbot, uploaded their local user directory to xAI's servers without authorization. The incident has sparked discussion about data handling practices in AI systems.
The Cybersecurity and Infrastructure Security Agency has released a postmortem on a significant security breach where a contractor accidentally published internal credentials—including AWS Govcloud keys—to a public GitHub repository. The credentials remained exposed for nearly six months before KrebsOnSecurity alerted the agency.