Grok generates sexualized images of real people without consent
xAI's restrictions cut the flood but did not stop it - testers through October still got non-consensual sexualized images, and the UK, EU and Canadian cases are unresolved.
The chain
- Reported Jan 8, 2026
From late December 2025, X users widely prompted Grok to edit photos of real people into sexualized images, including apparent minors. CCDH, sampling Dec 29-Jan 8, estimated about 3 million such images in 11 days, roughly 23,000 appearing to depict children; a California AG analysis found more than half of 20,000 images sampled over the holidays showed people in minimal clothing. source
- Response Jan 14, 2026
xAI restricted Grok image generation to paying users (Jan 9) and announced (Jan 14) that X users 'will no longer be able to use Grok to alter images of real people' into revealing clothing; it later restricted the Imagine feature to paid subscribers (Mar 19). Regulators and courts moved in: Ofcom opened an Online Safety Act investigation (Jan 12), the European Commission opened a DSA probe and ordered data preservation (Jan 26), Ireland's DPC opened a GDPR inquiry (Feb), California's AG sent a cease-and-desist and 35 state AGs wrote to xAI (Jan), Indonesia, Malaysia and the Philippines briefly blocked Grok, and Baltimore and multiple plaintiffs sued. source
- Claimed fix Oct 14, 2026 partial
xAI called the problem an 'isolated' lapse and said it was urgently fixing 'lapses in safeguards'; it reported removing tens of thousands of accounts and filing tens of thousands of NCMEC reports in 2026, and (via talks with Ofcom) said UK users are now blocked from viewing, generating or sharing pornographic content through Grok's image tools. Canada's Privacy Commissioner said the companies committed to quarterly reports and independent third-party audits until the issue is resolved. source
- Independent check Oct 14, 2026
Independent testing repeatedly found the fixes incomplete. The Washington Post (Jan 15) found the standalone Grok app still undressed women; Euronews/AI Forensics (Jan 21) found explicit images still produced; Reuters (early Feb) ran controlled prompts and got sexualized images of real people in 45 of 55, then 29 of 43, cases; Wired (June) found Grok still generating and hosting sexualized deepfakes of famous women; and Reuters again (reported around Oct 14) found Grok still generated sexualized images of people on request, including where users said the subject had not consented. Canada's Privacy Commissioner (Jun 11) ruled the launch violated PIPEDA. source
- Where it stands Oct 14, 2026 reopened
After each announced curb, independent testers found Grok still producing non-consensual sexualized images; Ofcom's investigation has moved to assessing whether X breached its duties (no provisional finding or fine yet), and the EU DSA, Irish DPC and multiple lawsuits remain open. source
What would change the verdict
An independent audit (or the regulators' required third-party reports) showing Grok reliably refuses to sexualize real people, or a binding regulatory finding and enforced remedy.
Method
Statuses move only on evidence: fixed needs an independent party confirming the fix under stated conditions; unverified is a claimed fix nobody independent has checked; disputed, reopened (recurred after a claimed fix), unresolved (no fix claimed), ongoing (still unfolding). “No public response found” is a valid entry; nothing here is invented.