Boston Residents Discover Their Photos Stolen, Faces Replaced Online

Rosa Medina noticed it on a Tuesday in March. A neighbor had texted her a screenshot: Medina's headshot from a Jamaica Plain community garden newsletter had been lifted, resized, and dropped onto a fake Facebook profile pushing dietary supplements. She had never consented to any of it. She didn't even know the company's name.

Medina's experience is no longer unusual in Boston. Across neighborhoods from Dorchester to the South End, residents are reporting a sharp rise in what digital rights advocates call duplicate image replacement, the practice of scraping a person's photograph from one online source and substituting it into entirely different contexts, profiles, or advertisements without permission. For a city where civic life generates constant photo documentation, from MBTA accessibility hearings to Roxbury Block Association newsletters, the exposure risk is unusually broad.

A City That Documents Itself

Boston's density of publicly engaged institutions creates an unusually rich target environment. The Boston Public Library posts event photos on its Copley Square branch social media accounts. The Mattapan Food and Fitness Coalition documents health programming. Neighborhood associations in East Boston photograph their own town halls. Every one of those images can be indexed, scraped, and repurposed within minutes by automated tools.

The problem is compounded by the city's large university population. With roughly 150,000 students enrolled across institutions including Boston University, Northeastern, and UMass Boston in any given academic year, a continuous stream of new faces enters public digital spaces with little guidance on image rights. Student IDs, departmental directories, and thesis acknowledgment pages have all been identified by researchers as common scraping sources.

Community members describe the experience as profoundly disorienting. One Dorchester man said he discovered his photo on three separate websites offering personal loans, none of which he had ever contacted. A nurse who works in the Longwood Medical Area described finding her hospital directory photo used in a foreign-language health influencer account. Neither could immediately identify a legal remedy that didn't cost money they didn't have.

What's Being Done, and What Isn't

Massachusetts does not yet have a comprehensive consumer data privacy law on the books comparable to California's California Consumer Privacy Act, which took effect in January 2020. A Massachusetts Privacy Act has been debated on Beacon Hill in multiple legislative sessions but has not passed as of this writing. That gap leaves residents with limited statutory tools to demand image removal or seek damages.

The Mayor's Office of New Urban Mechanics, based at City Hall, has piloted digital literacy programming in partnership with several Boston Public Schools since 2023, covering basic online safety. But advocates argue that image-specific rights, the right to know when your photo has been copied, to demand its removal, and to understand who profited, are barely touched in those curricula.

The nonprofit group Digital Equity Boston, which operates out of offices on Washington Street in Roxbury, has been fielding an increasing number of calls from residents who have found their images misused. Staff there have been advising residents to conduct reverse image searches using tools such as Google Images or TinEye, then file takedown requests under the Digital Millennium Copyright Act, a process that works inconsistently and requires persistence that many working residents don't have time for.

For Rosa Medina, the fake Facebook profile was eventually taken down after she filed three separate reports over six weeks. The dietary supplement page that used her face is still online as of this week, hosted on a domain registered overseas.

Practically speaking, residents who discover their images have been duplicated and redistributed without consent have several options. Filing a DMCA takedown request with the hosting platform costs nothing but time. Documenting every instance with screenshots, including URLs and timestamps, strengthens any future legal complaint. And contacting the state Attorney General's consumer protection division at One Ashburton Place, Boston, creates an official record even when no immediate enforcement follows.

A bill currently sitting in the Joint Committee on Advanced Information Technology would require platforms doing business in Massachusetts to provide removal tools for unauthorized biometric data, which legal scholars say could encompass facial images. Its next scheduled hearing has not been publicly announced. Until something changes on Beacon Hill, residents are largely navigating this alone.