AI-Generated Medical Deepfakes Fool Radiologists and LLMs Alike
A landmark study from the Icahn School of Medicine at Mount Sinai reveals that synthetic X-ray images created by AI can deceive experienced radiologists and even the advanced models that generated them. The findings expose critical vulnerabilities in medical diagnostics, cybersecurity, and the legal integrity of digital health records.
Key Takeaways
- A landmark study from the Icahn School of Medicine at Mount Sinai reveals that synthetic X-ray images created by AI can deceive experienced radiologists and even the advanced models that generated them.
- The findings expose critical vulnerabilities in medical diagnostics, cybersecurity, and the legal integrity of digital health records.
Mentioned
Key Intelligence
Key Facts
- 117 radiologists from 12 hospitals in 6 countries participated in the study.
- 2Radiologists identified only 41% of AI-generated X-rays when unaware of the study's purpose.
- 3Detection accuracy for LLMs like GPT-5 and Gemini 2.5 Pro ranged from 57% to 85%.
- 4GPT-4o failed to detect all the deepfakes it had personally generated.
- 5The study utilized 264 X-ray images, 50% of which were synthetic fabrications.
- 6Expert accuracy improved to 75% only after being warned about the presence of fakes.
| Detection Group | ||
|---|---|---|
| Human Radiologists | 41% | 75% |
| AI Models (Range) | N/A | 57% - 85% |
| GPT-4o (Self-Detection) | N/A | <100% |
Who's Affected
Analysis
The emergence of high-fidelity synthetic media has moved beyond social media and political discourse into the high-stakes arena of clinical diagnostics. A recent study published in the journal Radiology demonstrates that artificial intelligence is now capable of generating fake X-ray images so realistic they frequently bypass the scrutiny of human experts and automated detection systems. This development marks a significant shift in the risk landscape for healthcare providers, moving the conversation from AI as a diagnostic aid to AI as a potential vector for systemic deception.
The research, led by Dr. Mickael Tordjman of the Icahn School of Medicine at Mount Sinai, involved 17 radiologists from 12 hospitals across six countries. These experts were tasked with reviewing 264 X-ray images, half of which were synthetically generated using tools like ChatGPT and RoentGen. The results were startling: when radiologists were unaware that the dataset contained fakes, they spontaneously identified the synthetic images only 41% of the time. Even when explicitly told that the dataset was compromised, their accuracy only rose to 75%, leaving a quarter of the synthetic images undetected. This performance gap suggests that the human eye is no longer a sufficient safeguard against sophisticated medical deepfakes.
The study tested four leading large language models (LLMs)—OpenAI’s GPT-4o and GPT-5, Google’s Gemini 2.5 Pro, and Meta’s Llama 4 Maverick—on their ability to detect these fabrications.
Perhaps more concerning is the failure of AI to police itself. The study tested four leading large language models (LLMs)—OpenAI’s GPT-4o and GPT-5, Google’s Gemini 2.5 Pro, and Meta’s Llama 4 Maverick—on their ability to detect these fabrications. Detection accuracy across these models ranged from a mediocre 57% to 85%. Notably, GPT-4o, the model responsible for creating many of the deepfakes used in the study, failed to identify all of its own creations. This recursive failure highlights a fundamental challenge in AI safety: as generative capabilities outpace discriminative capabilities, the tools used to verify the authenticity of medical data may become obsolete.
What to Watch
The implications of this 'high-stakes vulnerability' extend far beyond the reading room. Dr. Tordjman pointed to the risk of fraudulent litigation, where a fabricated fracture could be used to secure legal settlements or insurance payouts. More broadly, the findings suggest a catastrophic cybersecurity risk. If a malicious actor were to gain access to a hospital’s Picture Archiving and Communication System (PACS), they could inject synthetic images to manipulate patient diagnoses, alter clinical trials, or cause widespread chaos by undermining the reliability of the electronic health record. This 'clinical chaos' could erode the foundational trust between patients, providers, and the digital systems they rely on.
To mitigate these risks, the research team is calling for the immediate development of digital safeguards. Proposed solutions include the implementation of invisible watermarks embedded at the point of image capture and the use of blockchain-based verification to ensure the provenance of medical data. However, as Dr. Tordjman noted, the industry may only be seeing the 'tip of the iceberg.' As generative AI continues to evolve, the medical community must pivot from viewing AI solely as a tool for efficiency to recognizing it as a potential source of sophisticated adversarial attacks that require a new paradigm of digital forensic security.
Cite This Page
"AI-Generated Medical Deepfakes Fool Radiologists and LLMs Alike." Healthcare Intelligence Brief, March 26, 2026. https://gethealthbrief.com/story/ai-medical-deepfakes-radiology-vulnerability
How we covered this story
Every story in our healthcare coverage is assembled from multiple primary sources, cross-referenced for factual consistency, and scored along three independent dimensions: sentiment, operational impact, and source-cluster confidence. Single-source rumors and unverifiable claims do not pass our editorial gate. When a story shows "Verified by N sources" with N≥2, the development is independently corroborated; when N=1, we mark it explicitly so readers can weigh the signal accordingly.
Impact scoring uses a 1-10 scale weighted toward regulatory, financial, and operational consequence rather than coverage volume. A topic that runs in every outlet but moves no real decisions ranks lower than a niche regulatory filing that reshapes how operators in the healthcare space have to behave. Read our full methodology for the scoring rubric, our glossary for term definitions, and our trends index for the longitudinal view across the beat.
Sources are only linked to a story once they clear our classification pipeline at a minimum 35 percent relevance threshold. According to that methodology, reviewed July 2026, this follows multi-source corroboration standards recommended by journalism research bodies such as the Reuters Institute for the Study of Journalism.
See something wrong in this story — a wrong fact, a broken source link, a misattributed entity? Report a data issue.
| Signal on this page | What it tells you |
|---|---|
| Verified by N sources | Independent corroboration count. N≥2 is our confidence floor; N=1 is marked explicitly. |
| Impact score (1-10) | Regulatory + financial + operational weight. 8+ signals an experienced-operator action item. |
| Sentiment | Five-tier classification trained on labeled healthcare-specific corpora. |
| Timeline | Where applicable, the related-events sequence that contextualizes today's development. |