Anthropic
Disclosed Aug 27, 20251 year agoConfirmed
Cybercriminal used Claude Code to steal and extort data from at least 17 organizations
Anthropic said it disrupted a criminal who used Claude Code to automate reconnaissance, credential harvesting and network intrusion against at least 17 organizations in healthcare, emergency services, government and religious sectors, then threatened to leak stolen data with ransom demands sometimes above $500,000.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Aug 27, 2025 |
| Attack | Extortion |
| Data exposed | Financial, Health, Credentials and tokens, Other |
| Sector | AI · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Detecting and countering misuse of AI: August 2025anthropic.com · The organization | The organization |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Aug 27, 2025 |
Other breaches at Anthropic
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Infostealer-stolen session cookies used to hijack Claude accountsAug 313 weeks agoHackingUnverified | Aug 313 weeks ago | Hacking | AI | Unverified | Unknown |
| Shared Claude conversations appeared in Google search resultsJul 272 months agoExposed dataUnverified | Jul 272 months ago | Exposed data | AI | Unverified | Unknown |
| Claude Code source code accidentally published in npm packageMar 315 months agoExposed dataUnverified | Mar 315 months ago | Exposed data | AI | Unverified | Unknown |
| DeepSeek, Moonshot and MiniMax used 24,000 fraudulent accounts to distill ClaudeFeb 237 months agoAI or model | Feb 237 months ago | AI or model | AI | Confirmed | Unknown |
| Chinese state group manipulated Claude Code to attack about 30 organizationsNov 13, 202510 months agoHacking | Nov 13, 202510 months ago | Hacking | AI | Confirmed | Unknown |
| Contractor mistakenly emailed file of customer names and credit balances to third partyJan 29, 20242 years agoInsiderUnverified | Jan 29, 20242 years ago | Insider | AI | Unverified | Unknown |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.