We have a site where we disallow the Google image bot. We started putting the photos on a sub-domain of that web site. Google-bot apparently scanned and put all the images on that sub-domain on the net even though our robots.txt file for that site tells Google to bug off and there's no link to those images except from our site.