PrivacyHigh
GenNomis AI Database Reportedly Exposes Nearly 100,000 Deepfake and Nudify Images in Public Breach
- Occurred
- Mar 31, 2025
- Published
- Apr 1, 2025
- Source
- AI Incident Database
Summary
In March 2025, cybersecurity researcher Jeremiah Fowler discovered an unprotected database linked to GenNomis by AI-NOMIS, a South Korean company offering face-swapping and "nudify" AI services. The exposed 47.8GB dataset included nearly 100,000 files. Many depicted explicit deepfake images, some involving minors or celebrities. No personal data was found, but the breach was a serious failure in data security and consent safeguards in AI image-generation platforms.
Developers
- GenNomis by AI-NOMIS
- AI-NOMIS
Deployers
- GenNomis by AI-NOMIS
- GenNomis
Harmed parties
- Minors
- Individuals whose likenesses were used without consent
- General public
- Privacy
- Epistemic integrity
- People depicted in non-consensual intimate imagery
Tags
- Deepfake
- CSAM
- Impersonation
- Face-swapping
- Nudify
- Database
- Database breach
- South Korea
- Biometric data
- Celebrity impersonation
- Data breach
- Unsecured database
- Synthetic media abuse
- Non-consensual intimate abuse imagery
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: Unprotected database exposed nearly 100,000 deepfake images, including explicit content involving minors, indicating severe data security and consent failures.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8